Detections
Analytics

CVE-2014-2490

critical

Description

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

References

http://www.vmware.com/security/advisories/VMSA-2014-0012.html

http://www.debian.org/security/2014/dsa-2987

http://www.debian.org/security/2014/dsa-2980

http://security.gentoo.org/glsa/glsa-201502-12.xml

http://seclists.org/fulldisclosure/2014/Dec/23

http://marc.info/?l=bugtraq&m=140852886808946&w=2

https://access.redhat.com/errata/RHSA-2014:0902

http://www.securitytracker.com/id/1030577

http://www.securityfocus.com/bid/68645

http://www.securityfocus.com/archive/1/534161/100/0/threaded

http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html

http://secunia.com/advisories/60812

http://secunia.com/advisories/60485

http://secunia.com/advisories/60129

Details

Source: Mitre, NVD

Published: 2014-07-17

Updated: 2025-04-12

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 10

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.07313