CVE-2014-6493: High severity oracle java se 7 vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532.

Affected Software

4 affected components

Oracle JDK=1.6.0-update81

ORACLE JRE=1.6.0-update_81

ORACLE JRE=1.7.0-update_67

ORACLE JRE=1.8.0-update_20

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·10:03 PM

Data Sourced

via MITRE·10:03 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6493?

CVE-2014-6493 is rated as a critical vulnerability due to its potential impact on confidentiality, integrity, and availability.

What software is affected by CVE-2014-6493?

CVE-2014-6493 affects Oracle Java SE versions 6u81, 7u67, and 8u20.

How do I fix CVE-2014-6493?

To mitigate CVE-2014-6493, upgrade to the latest version of Oracle Java SE that addresses this vulnerability.

What types of attacks can exploit CVE-2014-6493?

CVE-2014-6493 can be exploited by remote attackers through unspecified vectors affecting Java deployment.

Is there a patch available for CVE-2014-6493?

Yes, Oracle provides patches in their Java updates that address CVE-2014-6493.