CVE-2014-0416

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via…

published January 15, 2014

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via vectors related to JAAS. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to how principals are set for the Subject class, which allows attackers to escape the sandbox using deserialization of a crafted Subject instance.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04056 · 90.6th percentile
Published
2014-01-15T02:50Z
EPSS history
Timeline
  • 15 JAN 02:50Z
    Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect integrity via…
    cvelistv5