ID CVE-2014-3086
Summary Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain privileges by leveraging the ability to execute code in the context of a security manager.
References
Vulnerable Configurations
  • cpe:2.3:a:ibm:lotus_notes:8.5.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:lotus_notes:8.5.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:lotus_notes:9.0.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:lotus_notes:9.0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:lotus_domino:8.5.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:lotus_domino:9.0.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:lotus_domino:9.0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:ibm:websphere_real_time:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:ibm:websphere_real_time:3.0:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 29-08-2017 - 01:34)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
redhat via4
rpms
  • java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el5_10
  • java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5
  • java-1.6.0-ibm-accessibility-1:1.6.0.16.1-1jpp.1.el5_10
  • java-1.6.0-ibm-demo-1:1.6.0.16.1-1jpp.1.el5_10
  • java-1.6.0-ibm-demo-1:1.6.0.16.1-1jpp.1.el6_5
  • java-1.6.0-ibm-devel-1:1.6.0.16.1-1jpp.1.el5_10
  • java-1.6.0-ibm-devel-1:1.6.0.16.1-1jpp.1.el6_5
  • java-1.6.0-ibm-javacomm-1:1.6.0.16.1-1jpp.1.el5_10
  • java-1.6.0-ibm-javacomm-1:1.6.0.16.1-1jpp.1.el6_5
  • java-1.6.0-ibm-jdbc-1:1.6.0.16.1-1jpp.1.el5_10
  • java-1.6.0-ibm-jdbc-1:1.6.0.16.1-1jpp.1.el6_5
  • java-1.6.0-ibm-plugin-1:1.6.0.16.1-1jpp.1.el5_10
  • java-1.6.0-ibm-plugin-1:1.6.0.16.1-1jpp.1.el6_5
  • java-1.6.0-ibm-src-1:1.6.0.16.1-1jpp.1.el5_10
  • java-1.6.0-ibm-src-1:1.6.0.16.1-1jpp.1.el6_5
  • java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el5_10
  • java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5
  • java-1.5.0-ibm-accessibility-1:1.5.0.16.7-1jpp.1.el5_10
  • java-1.5.0-ibm-demo-1:1.5.0.16.7-1jpp.1.el5_10
  • java-1.5.0-ibm-demo-1:1.5.0.16.7-1jpp.1.el6_5
  • java-1.5.0-ibm-devel-1:1.5.0.16.7-1jpp.1.el5_10
  • java-1.5.0-ibm-devel-1:1.5.0.16.7-1jpp.1.el6_5
  • java-1.5.0-ibm-javacomm-1:1.5.0.16.7-1jpp.1.el5_10
  • java-1.5.0-ibm-javacomm-1:1.5.0.16.7-1jpp.1.el6_5
  • java-1.5.0-ibm-jdbc-1:1.5.0.16.7-1jpp.1.el5_10
  • java-1.5.0-ibm-jdbc-1:1.5.0.16.7-1jpp.1.el6_5
  • java-1.5.0-ibm-plugin-1:1.5.0.16.7-1jpp.1.el5_10
  • java-1.5.0-ibm-plugin-1:1.5.0.16.7-1jpp.1.el6_5
  • java-1.5.0-ibm-src-1:1.5.0.16.7-1jpp.1.el5_10
  • java-1.5.0-ibm-src-1:1.5.0.16.7-1jpp.1.el6_5
  • java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el5_10
  • java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5
  • java-1.7.0-ibm-demo-1:1.7.0.7.1-1jpp.1.el5_10
  • java-1.7.0-ibm-demo-1:1.7.0.7.1-1jpp.1.el6_5
  • java-1.7.0-ibm-devel-1:1.7.0.7.1-1jpp.1.el5_10
  • java-1.7.0-ibm-devel-1:1.7.0.7.1-1jpp.1.el6_5
  • java-1.7.0-ibm-jdbc-1:1.7.0.7.1-1jpp.1.el5_10
  • java-1.7.0-ibm-jdbc-1:1.7.0.7.1-1jpp.1.el6_5
  • java-1.7.0-ibm-plugin-1:1.7.0.7.1-1jpp.1.el5_10
  • java-1.7.0-ibm-plugin-1:1.7.0.7.1-1jpp.1.el6_5
  • java-1.7.0-ibm-src-1:1.7.0.7.1-1jpp.1.el5_10
  • java-1.7.0-ibm-src-1:1.7.0.7.1-1jpp.1.el6_5
  • java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0
  • java-1.7.1-ibm-demo-1:1.7.1.1.1-1jpp.1.el7_0
  • java-1.7.1-ibm-devel-1:1.7.1.1.1-1jpp.1.el7_0
  • java-1.7.1-ibm-jdbc-1:1.7.1.1.1-1jpp.1.el7_0
  • java-1.7.1-ibm-plugin-1:1.7.1.1.1-1jpp.1.el7_0
  • java-1.7.1-ibm-src-1:1.7.1.1.1-1jpp.1.el7_0
  • java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el5
  • java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6
  • java-1.6.0-ibm-devel-1:1.6.0.16.3-1jpp.1.el5
  • java-1.6.0-ibm-devel-1:1.6.0.16.3-1jpp.1.el6
refmap via4
aixapar IV62634
bid 69183
confirm
secunia
  • 59680
  • 60081
  • 60317
  • 60622
  • 61577
  • 61640
xf ibm-java-cve20143086-code-exec(94097)
Last major update 29-08-2017 - 01:34
Published 12-08-2014 - 00:55
Last modified 29-08-2017 - 01:34
Back to Top