Home > Vulnerability Database > CVE-2014-2398

WhiteSource Vulnerability Database

CVE-2014-2398

Good to know:

Date: April 15, 2014

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

Severity Score

3.1

Related Resources (5)

Url: http://marc.info/?l=bugtraq&m=140852886808946&w=2

Url: http://rhn.redhat.com/errata/RHSA-2014-0685.html

Url: http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

Url: http://secunia.com/advisories/59058

Url: https://nvd.nist.gov/vuln/detail/CVE-2014-2398

Severity Score

3.1

Weakness Type (CWE)

Insufficient Information

NVD-CWE-noinfo

Top Fix

Upgrade Version

CVSS v3.1

Base Score:	3.1
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	3.5
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	SINGLE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

WhiteSource Vulnerability Database

We found results for “”

CVE-2014-2398

Good to know:

Date: April 15, 2014

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v3.1

CVSS v2

Do you need more information?