CVE-2014-8892: ibm java_sdk
Vulnerability summary
CVE-2014-8892 is a high (CVSS 7.8) vulnerability in ibm java_sdk. EPSS estimates a 4.45% chance of exploitation in the next 30 days, higher than 91.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 8 · Related 2Timeline
- 06-03-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to bypass intended access permissions and obtain sensitive information via unspecified vectors related to the security manager.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.45%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.45% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ibm1 product
- java_sdk≥ 5.0.0.0, ≤ 5.0.16.8 | ≥ 6.0.0.0, < 6.0.16.3 | ≥ 6.1.0.0, ≤ 6.1.8.2 | ≥ 7.0.0.0, < 7.0.8.10 | ≥ 7.1.0.0, < 7.1.2.10
1 vendor · 1 product
References
14 links- lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-02/msg00025.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
Show all 14 references
- lists.opensuse.org/opensuse-security-announce/2015-02/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2015-02/msg00021.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory