CVE-2014-0463

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
http://www.securityfocus.com/bid/66908Third Party Advisory, VDB Entry
http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
http://www.securityfocus.com/bid/66908Third Party Advisory, VDB Entry

Timeline

Published: Apr 16, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-04644.3Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a CVE-2014-04653.5Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users CVE-2014-04666.8The fixps script in a2ps 4.14 does not use the -dSAFER option when executing gs, which allows context-dependent attackers to delete arbitrar CVE-2014-04675.0Buffer overflow in copy.c in Mutt before 1.5.23 allows remote attackers to cause a denial of service (crash) via a crafted RFC2047 header li CVE-2014-04689.8Vulnerability in fusionforge in the shipped Apache configuration, where the web server may execute scripts that the users would have upload CVE-2014-04696.8Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code vi CVE-2014-04707.2super.c in Super 3.30.0 does not check the return value of the setuid function when the -F flag is set, which allows local users to gain pri CVE-2014-04715.0Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allo CVE-2014-04725.1The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 a CVE-2014-04735.0The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF toke CVE-2014-047410.0The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.CVE-2014-04756.8Multiple directory traversal vulnerabilities in GNU C Library (aka glibc or libc6) before 2.20 allow context-dependent attackers to bypass F