CVE-2014-6593 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity v...
MediumCVSS 4.0
EPSS 66.4%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle jrockit | = r27.8.4 | No fix listed |
| oracle jrockit | = r28.3.4 | No fix listed |
| oracle jdk | = 1.5.0-update75 | No fix listed |
| oracle jdk | = 1.6.0-update85 | No fix listed |
| oracle jdk | = 1.7.0-update71 | No fix listed |
| oracle jdk | = 1.7.0-update72 | No fix listed |
| oracle jdk | = 1.8.0-update25 | No fix listed |
| oracle jdk | = 1.8.0-update6 | No fix listed |
| oracle jre | = 1.5.0-update75 | No fix listed |
| oracle jre | = 1.6.0-update85 | No fix listed |
| oracle jre | = 1.7.0-update71 | No fix listed |
| oracle jre | = 1.7.0-update72 | No fix listed |
| oracle jre | = 1.8.0-update25 | No fix listed |
| oracle jre | = 1.8.0-update6 | No fix listed |
References
- HPSBUX03281 vendor-advisory
- openSUSE-SU-2015:0190 vendor-advisory
- SUSE-SU-2015:0336 vendor-advisory
- SUSE-SU-2015:0503 vendor-advisory
- SSRT101951 vendor-advisory
- SSRT101968 vendor-advisory
- packetstormsecurity.com
- RHSA-2015:0068 vendor-advisory
- RHSA-2015:0079 vendor-advisory
- RHSA-2015:0080 vendor-advisory
- RHSA-2015:0085 vendor-advisory
- RHSA-2015:0086 vendor-advisory
- RHSA-2015:0136 vendor-advisory
- RHSA-2015:0264 vendor-advisory
- DSA-3144 vendor-advisory
- DSA-3147 vendor-advisory
- www.oracle.com patch vendor-advisory
- 72169 vdb-entry
- 1031580 vdb-entry
- USN-2486-1 vendor-advisory
- USN-2487-1 vendor-advisory
- www.vmware.com
- kc.mcafee.com
- GLSA-201507-14 vendor-advisory
- GLSA-201603-14 vendor-advisory
- www-304.ibm.com
- 38641 exploit