CVE-2014-4265: Medium severity Oracle JDK vulnerability

Published Jul 15, 2014

Updated

Oracle Java SE 6u81, 7u65 and 8u11 fixes an unspecified vulnerability in the Deployment component (CVE-2014-4265). Upstream has CVSSv2 scored this issue as: 5.0/AV:N/AC:L/Au:N/C:N/I:P/A:N

External Reference:

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html#AppendixJAVA

Other sources

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Affected Software

6 affected components

Oracle JDK=1.6.0-update75

Oracle JDK=1.7.0-update60

Oracle JDK=1.8.0-update5

ORACLE JRE=1.6.0-update75

ORACLE JRE=1.7.0-update60

ORACLE JRE=1.8.0-update5

Event History

Jul 15, 2014

Data Sourced

via Red Hat·08:19 PM

DescriptionSeverityAffected Software

Jul 17, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4265?

CVE-2014-4265 has a CVSSv2 score of 5.0, indicating moderate severity.

How do I fix CVE-2014-4265?

To fix CVE-2014-4265, update your Oracle Java SE to the latest version beyond the affected updates.

Which software versions are affected by CVE-2014-4265?

CVE-2014-4265 affects Oracle JDK versions 6u81, 7u65, and 8u11.

What component is impacted by CVE-2014-4265?

CVE-2014-4265 specifically impacts the Deployment component of Oracle Java.

Does CVE-2014-4265 require user authentication to exploit?

No, CVE-2014-4265 can be exploited without user authentication.