Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2014-6457
HistoryOct 15, 2014 - 3:55 p.m.

CVE-2014-6457

2014-10-1515:55:07
[email protected]
web.nvd.nist.gov

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

3.1 Low

AI Score

Confidence

High

0.034 Low

EPSS

Percentile

91.5%

JSON

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

Affected configurations

NVD
Node
oraclejrockitMatchr27.8.3
OR
oraclejrockitMatchr28.3.3
Node
oraclejdkMatch1.5.0update_71
OR
oraclejdkMatch1.6.0update81
OR
oraclejdkMatch1.7.0update60
OR
oraclejdkMatch1.7.0update67
OR
oraclejdkMatch1.8.0update20
OR
oraclejreMatch1.5.0update_71
OR
oraclejreMatch1.6.0update_81
OR
oraclejreMatch1.7.0update_67
OR
oraclejreMatch1.7.0update60
OR
oraclejreMatch1.8.0update_20

References

Related

debiancve 1
cvelist 1
prion 1
veracode 6
cve 1
ibm 68
ubuntucve 1
nessus 43
openvas 35
redhat 11
oraclelinux 4
osv 3
debian 3
centos 4
amazon 3
mageia 1
suse 6
ubuntu 3
aix 1
f5 2
kaspersky 1
debiancve
debiancve
CVE-2014-6457
2014-10-15 15:55:07
cvelist
cvelist
CVE-2014-6457
2014-10-15 15:15:00
prion
prion
Design/Logic Flaw
2014-10-15 15:55:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:02:24
Privilege Escalation
2019-05-02 05:12:51
Information Disclosure
2019-05-02 05:12:50
cve
cve
CVE-2014-6457
2014-10-15 15:55:07
ibm
ibm
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Support Assistant Team Server (CVE-2014-6457)
2018-09-10 21:00:31
Security Bulletin: IBM License Metric Tool, IBM Endpoint Manager for Software Use Analysis and IBM Tivoli Asset Discovery for Distributed Java-related vulnerabilities - October 2014
2022-08-19 23:26:06
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect RequisitePro (CVE-2014-3566 and CVE-2014-6457)
2018-06-17 04:59:29
ubuntucve
ubuntucve
CVE-2014-6457
2014-10-15 00:00:00
nessus
nessus
Oracle JRockit R27.8.3 / R28.3.3 Multiple Vulnerabilities (October 2014 CPU)
2014-10-15 00:00:00
IBM WebSphere Application Server 7.0 < Fix Pack 37 Multiple Vulnerabilities (POODLE)
2015-03-17 00:00:00
RHEL 5 / 6 : java-1.5.0-ibm (RHSA-2014:1881) (POODLE)
2014-11-21 00:00:00
openvas
openvas
Oracle Java SE JRE Multiple Unspecified Vulnerabilities-01 (Oct 2014) - Linux
2014-10-20 00:00:00
Oracle Java SE JRE Multiple Unspecified Vulnerabilities-01 (Oct 2014) - Windows
2014-10-20 00:00:00
Oracle: Security Advisory (ELSA-2014-1633)
2015-10-06 00:00:00
redhat
redhat
(RHSA-2014:1881) Important: java-1.5.0-ibm security update
2014-11-20 00:00:00
(RHSA-2014:1634) Important: java-1.6.0-openjdk security and bug fix update
2014-10-14 00:00:00
(RHSA-2014:1633) Important: java-1.7.0-openjdk security and bug fix update
2014-10-14 00:00:00
oraclelinux
oraclelinux
java-1.7.0-openjdk security and bug fix update
2014-10-15 00:00:00
java-1.6.0-openjdk security and bug fix update
2014-10-14 00:00:00
java-1.7.0-openjdk security and bug fix update
2014-10-15 00:00:00
osv
osv
openjdk-7 - security update
2014-11-29 00:00:00
openjdk-6 - security update
2014-11-26 00:00:00
openjdk-6 - security update
2014-11-28 00:00:00
debian
debian
[SECURITY] [DSA 3080-1] openjdk-7 security update
2014-11-29 12:43:45
[SECURITY] [DSA 3077-1] openjdk-6 security update
2014-11-26 19:10:21
[SECURITY] [DLA 96-1] openjdk-6 security update
2014-11-28 10:25:51
centos
centos
java security update
2014-10-15 11:48:47
java security update
2014-10-15 11:42:17
java security update
2014-10-15 12:22:05
amazon
amazon
Important: java-1.7.0-openjdk
2014-10-16 22:16:00
Important: java-1.6.0-openjdk
2014-10-16 22:15:00
Important: java-1.8.0-openjdk
2014-10-16 22:16:00
mageia
mageia
Updated java-1.7.0-openjdk packages fix security vulnerabilities
2014-10-26 00:23:09
suse
suse
Security update for java-1_7_0-openjdk (important)
2014-11-13 17:04:46
Security update for java-1_5_0-ibm (important)
2015-02-25 19:05:32
Security update for IBM Java (important)
2014-12-02 19:04:43
ubuntu
ubuntu
OpenJDK 6 vulnerabilities
2014-10-17 00:00:00
OpenJDK 7 vulnerabilities
2014-10-23 00:00:00
OpenJDK 7 vulnerabilities
2014-10-23 00:00:00
aix
aix
Multiple vulnerabilities in current releases of the IBM SDK Java Technology Edition; issues in the Oracle October 2014 Critical Patch Update plus the POODLE SSLv3 vulnerability and
2014-11-14 15:40:48
f5
f5
SOL15745 - Multiple Oracle Java vulnerabilities
2014-10-27 00:00:00
K15745 : Multiple Oracle Java vulnerabilities
2014-10-28 00:00:00
kaspersky
kaspersky
KLA10505 Multiple vulnerabilities in Oracle products
2014-10-15 00:00:00

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:N/I:P/A:P

3.1 Low

AI Score

Confidence

High

0.034 Low

EPSS

Percentile

91.5%

JSON
Related for NVD:CVE-2014-6457
debiancve1cvelist1prion1veracode6cve1ibm68ubuntucve1nessus43openvas35redhat11oraclelinux4osv3debian3centos4amazon3mageia1suse6ubuntu3aix1f52kaspersky1