VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 16, 2014· Updated Jun 17, 2026

CVE-2014-2423

CVE-2014-2423

Description

Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerability than CVE-2014-0452 and CVE-2014-0458.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Oracle Corporation/Jdk3 versions
    cpe:2.3:a:oracle:jdk:1.6.0:update71:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:jdk:1.6.0:update71:*:*:*:*:*:*
    • cpe:2.3:a:oracle:jdk:1.7.0:update51:*:*:*:*:*:*
    • cpe:2.3:a:oracle:jdk:1.8.0:-:*:*:*:*:*:*
  • Oracle Corporation/Jre3 versions
    cpe:2.3:a:oracle:jre:1.6.0:update71:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oracle:jre:1.6.0:update71:*:*:*:*:*:*
    • cpe:2.3:a:oracle:jre:1.7.0:update51:*:*:*:*:*:*
    • cpe:2.3:a:oracle:jre:1.8.0:-:*:*:*:*:*:*
  • Canonical/Ubuntu Linux5 versions
    cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*+ 4 more
    • cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
  • Debian/linux3 versions
    cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
  • Sun Corporation/Java SEllm-fuzzy
    Range: 6u71, 7u51, 8
  • Oracle Corporation/Java SE Embeddedllm-fuzzy
    Range: 7u51
  • osv-coords
    pkg:rpm/opensuse/java-1_7_0-openjdk&distro=openSUSE%20Tumbleweed
    Range: < 1.7.0.121-1.1

Patches

Vulnerability mechanics

References

15

News mentions

0

No linked articles in our index yet.