CVE-2014-2490

CRITICAL 9.3CVE-2014-2490 · Published 17/07/2014 · updated 17/06/2026

In short

CVE-2014-2490 is a CRITICAL (CVSS 9.3) vulnerability affecting jdk (oracle), jre (oracle).
Chance of exploitation in the next 30 days (EPSS): 6.1%, higher than 93.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk oracle	`= 1.7.0= 1.8.0`	No fix yet
jre oracle	`= 1.7.0= 1.8.0`	No fix yet

Description

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

References

marc.info · Third Party Advisory
seclists.org/fulldisclosure/2014/Dec/23 · Mailing List
secunia.com/advisories/60129
secunia.com/advisories/60485
secunia.com/advisories/60812
security.gentoo.org/glsa/glsa-201502-12.xml · Third Party Advisory
debian.org/security/2014/dsa-2980 · Third Party Advisory
debian.org/security/2014/dsa-2987 · Third Party Advisory
oracle.com/technetwork/topics/security/cpujul2014-1972956.html · Vendor Advisory
securityfocus.com/archive/1/534161/100/0/threaded
securityfocus.com/bid/68645
securitytracker.com/id/1030577
vmware.com/security/advisories/VMSA-2014-0012.html · Third Party Advisory

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jdk

oracle

= 1.7.0= 1.8.0

No fix yet

jre

oracle

= 1.7.0= 1.8.0

No fix yet

More vulnerabilities in jdk

See all →