CVE-2014-6466: Medium severity oracle java se 7 vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Internet Explorer, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Affected Software

5 affected components

Oracle JDK=1.6.0-update81

Oracle JDK=1.8.0-update20

ORACLE JRE=1.6.0-update_81

ORACLE JRE=1.7.0-update_67

ORACLE JRE=1.8.0-update_20

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6466?

CVE-2014-6466 has a high severity rating as it can affect the confidentiality, integrity, and availability of systems.

How do I fix CVE-2014-6466?

To mitigate CVE-2014-6466, users should update to the latest versions of Oracle Java SE and ensure that Internet Explorer is also updated.

What versions of Oracle software are affected by CVE-2014-6466?

CVE-2014-6466 affects Oracle Java SE versions 6u81, 7u67, and 8u20, along with their corresponding Runtime Environments.

What impact does CVE-2014-6466 have on systems?

CVE-2014-6466 can lead to significant security risks, including unauthorized access to confidential information and potential system instability.

Is there a patch available for CVE-2014-6466?

Yes, Oracle has released patches for CVE-2014-6466 in the subsequent updates of their Java SE and JRE products.