vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2014-8891

N/A
Published: March 6, 2015 at 11:00 PM UTC
Updated: June 17, 2026 at 12:17 AM UTC
1 product affected across 1 vendorJava SDK

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 7%

Description

Unspecified vulnerability in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vectors related to the security manager.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Java SDK· IBM
95%
5.0.0.0 ≤ v ≤ 5.0.16.86.0.0.0 ≤ v < 6.0.16.36.1.0.0 ≤ v ≤ 6.1.8.27.0.0.0 ≤ v < 7.0.8.107.1.0.0 ≤ v < 7.1.2.10
Affected range stops below 6.0.16.3, so it looks safe — our inference, not a vendor statement
Affected range stops below 7.0.8.10, so it looks safe — our inference, not a vendor statement
Affected range stops below 7.1.2.10, so it looks safe — our inference, not a vendor statement

References (13)

Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00021.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00022.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00025.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
Vendor Advisoryx_refsource_SUSEMailing ListThird Party Advisory
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00013.html

CVSS

10HIGH[email protected]
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card