CVE-2014-6457

MEDIUM 4.0CVE-2014-6457 · Published 15/10/2014 · updated 17/06/2026

In short

CVE-2014-6457 is a MEDIUM (CVSS 4.0) vulnerability affecting jdk (oracle), jre (oracle), jrockit (oracle).
Chance of exploitation in the next 30 days (EPSS): 3.5%, higher than 89.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk oracle	`= 1.5.0= 1.6.0= 1.7.0= 1.8.0`	No fix yet
jre oracle	`= 1.5.0= 1.6.0= 1.7.0= 1.8.0`	No fix yet
jrockit oracle	`= r27.8.3= r28.3.3`	No fix yet

Description

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

References

linux.oracle.com/errata/ELSA-2014-1633.html
linux.oracle.com/errata/ELSA-2014-1634.html
linux.oracle.com/errata/ELSA-2014-1636
lists.opensuse.org/opensuse-security-announce/2014-11/msg00013.html
lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html
lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html
lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html
lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html
lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
marc.info
rhn.redhat.com/errata/RHSA-2014-1620.html

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free