NVD

Id
35770  
Name
CVE-2014-8891  
Description
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vectors related to the security manager.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-03-06  
Modified Date
2016-12-27  
Seq
2014-8891  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
183200 35770 CVE-2014-8891 SUSE-SU-2015:0304  View
183201 35770 CVE-2014-8891 SUSE-SU-2015:0306  View
183202 35770 CVE-2014-8891 SUSE-SU-2015:0343  View
183203 35770 CVE-2014-8891 SUSE-SU-2015:0344  View
183204 35770 CVE-2014-8891 SUSE-SU-2015:0345  View
183205 35770 CVE-2014-8891 SUSE-SU-2015:0376  View
183206 35770 CVE-2014-8891 SUSE-SU-2015:0392  View
183207 35770 CVE-2014-8891 SUSE-SU-2015:1073  View
183208 35770 CVE-2014-8891 RHSA-2015:0136  View
183209 35770 CVE-2014-8891 RHSA-2015:0264  View
183210 35770 CVE-2014-8891 http://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_February_2015  View
183211 35770 CVE-2014-8891 https://bugzilla.redhat.com/show_bug.cgi?id=1189142  View
183212 35770 CVE-2014-8891 https://www-304.ibm.com/support/docview.wss?uid=swg21695474  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19083 JVNDB-2014-007958 IBM SDK, Java Technology Edition の Java Virtual Machine における Java のサンドボックスをエスケープされる脆弱性 IBM SDK, Java Technology Edition の Java Virtual Machine (JVM) には、Java のサンドボックスをエスケープされ、任意のコードを実行される脆弱性が存在します。 CVE-2014-8891 76184 CVE-2014-8891 35770 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007958.html 2014-11-14 2015-06-08 View