CVE-2014-0460

MEDIUM 5.8CVE-2014-0460 · Published 16/04/2014 · updated 17/06/2026

In short

CVE-2014-0460 is a MEDIUM (CVSS 5.8) vulnerability affecting junos space (juniper), jdk (oracle), jre (oracle).
Chance of exploitation in the next 30 days (EPSS): 4.3%, higher than 91.2% of all vulnerabilities.
Fix: update to 15.1 or later.

Package	Affected versions	Patched versions
junos space juniper	`< 15.1`	`15.1`
jdk oracle	`= 1.5.0= 1.6.0= 1.7.0= 1.8.0`	No fix yet
jre oracle	`= 1.5.0= 1.6.0= 1.7.0= 1.8.0`	No fix yet
jrockit oracle	`= r27.8.1= r28.3.1`	No fix yet

Description

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

References

kb.juniper.net/InfoCenter/index · Third Party Advisory
marc.info · Issue Tracking
marc.info · Issue Tracking
rhn.redhat.com/errata/RHSA-2014-0675.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2014-0685.html · Third Party Advisory
secunia.com/advisories/58415 · Third Party Advisory
secunia.com/advisories/59022 · Third Party Advisory
secunia.com/advisories/59023 · Third Party Advisory
secunia.com/advisories/59058 · Third Party Advisory
secunia.com/advisories/59071 · Third Party Advisory
secunia.com/advisories/59082 · Third Party Advisory
secunia.com/advisories/59250 · Third Party Advisory
secunia.com/advisories/59255 · Third Party Advisory

More vulnerabilities in junos space

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

junos space

juniper

< 15.1

15.1

jdk

oracle

= 1.5.0= 1.6.0= 1.7.0= 1.8.0

No fix yet

jre

oracle

= 1.5.0= 1.6.0= 1.7.0= 1.8.0

No fix yet

jrockit

oracle

= r27.8.1= r28.3.1

No fix yet

More vulnerabilities in junos space

See all →