Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveOracleCVE-2014-6593
HistoryJan 21, 2015 - 3:28 p.m.

CVE-2014-6593

2015-01-2115:28:29
oracle
web.nvd.nist.gov
113
cve-2014-6593
oracle
java se
vulnerability
confidentiality
integrity
nvd
jsse

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

AI Score

3.9

Confidence

Low

EPSS

0.698

Percentile

98.0%

JSON

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

Affected configurations

Nvd
Node
oraclejrockitMatchr27.8.4
OR
oraclejrockitMatchr28.3.4
Node
oraclejdkMatch1.5.0update75
OR
oraclejdkMatch1.6.0update85
OR
oraclejdkMatch1.7.0update71
OR
oraclejdkMatch1.7.0update72
OR
oraclejdkMatch1.8.0update25
OR
oraclejdkMatch1.8.0update6
OR
oraclejreMatch1.5.0update75
OR
oraclejreMatch1.6.0update85
OR
oraclejreMatch1.7.0update71
OR
oraclejreMatch1.7.0update72
OR
oraclejreMatch1.8.0update25
OR
oraclejreMatch1.8.0update6
VendorProductVersionCPE
oraclejrockitr28.3.4cpe:/a:oracle:jrockit:r28.3.4:::
oraclejrockitr27.8.4cpe:/a:oracle:jrockit:r27.8.4:::

References

Related

vmware 2
cvelist 1
threatpost 1
nvd 2
packetstorm 2
debiancve 1
veracode 1
ibm 83
prion 1
metasploit 1
ubuntucve 1
kaspersky 1
zdt 2
openvas 30
nessus 35
cve 1
f5 4
redhat 10
centos 4
mageia 1
oraclelinux 3
osv 2
debian 3
amazon 2
ubuntu 2
suse 2
archlinux 1
vmware
vmware
VMware product updates address critical information disclosure issue in JRE.
2015-04-02 00:00:00
VMware product updates address critical information disclosure issue in JRE
2015-04-02 00:00:00
cvelist
cvelist
CVE-2014-6593
2015-01-21 15:00:00
threatpost
threatpost
VMware Fixes Java Information Disclosure Vulnerability
2015-04-03 11:03:15
nvd
nvd
CVE-2014-6593
2015-01-21 15:28:29
CVE-2015-6593
2015-05-30 19:59:10
packetstorm
packetstorm
Java Secure Socket Extension (JSSE) SKIP-TLS MITM Proxy
2015-08-12 00:00:00
Java Secure Socket Extension (JSSE) SKIP-TLS
2015-11-06 00:00:00
debiancve
debiancve
CVE-2014-6593
2015-01-21 15:28:29
veracode
veracode
Authorization Bypass
2019-05-02 05:07:16
ibm
ibm
Security Bulletin: Vulnerability in IBM Java SDK affects IBM SONAS (CVE-2014-6593)
2018-06-18 00:09:22
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect the IBM Installation Manager and IBM Packaging Utility (CVE-2014-6593 and CVE-2015-0138)
2021-10-25 12:12:53
Security Bulletin: Vulnerabilities in IBM Java SDK affects IBM eDiscovery Analyzer
2018-06-17 12:10:14
prion
prion
Design/Logic Flaw
2015-01-21 15:28:00
metasploit
metasploit
Java Secure Socket Extension (JSSE) SKIP-TLS MITM Proxy
2015-06-09 02:41:17
ubuntucve
ubuntucve
CVE-2014-6593
2015-01-21 00:00:00
kaspersky
kaspersky
KLA10530 JRE update for multiple VMware products
2015-04-02 00:00:00
zdt
zdt
Java Secure Socket Extension (JSSE) SKIP-TLS
2015-11-05 00:00:00
Java Secure Socket Extension (JSSE) SKIP-TLS MITM Proxy Exploit
2015-08-13 00:00:00
openvas
openvas
VMware NSX updates address critical information disclosure issue in JRE (VMSA-2015-0003)
2015-10-27 00:00:00
Oracle Java SE JRE Multiple Unspecified Vulnerabilities-04 (Feb 2015) - Windows
2015-02-02 00:00:00
Oracle Java SE JRE Multiple Unspecified Vulnerabilities-04 (Feb 2015) - Linux
2015-02-02 00:00:00
nessus
nessus
VMware vSphere Update Manager Java Vulnerability (VMSA-2015-0003)
2015-05-01 00:00:00
Oracle JRockit R27.8.4 / R28.3.4 Multiple Vulnerabilities (January 2015 CPU) (POODLE)
2015-01-21 00:00:00
Oracle Java SE 5 < Update 76 / 6 < Update 86 / 7 < Update 73 / 8 < Update 26 Multiple Vulnerabilities
2015-02-12 00:00:00
cve
cve
CVE-2015-6593
2015-05-30 19:59:10
f5
f5
K16353 : Multiple JavaSE server-side vulnerabilities CVE-2015-0383, CVE-2015-0410, and CVE-2014-6593
2015-04-02 00:00:00
SOL16353 - Multiple JavaSE server-side vulnerabilities CVE-2015-0383, CVE-2015-0410, and CVE-2014-6593
2015-04-02 00:00:00
K16352 : Multiple OpenJDK vulnerabilities
2015-04-02 00:00:00
redhat
redhat
(RHSA-2015:0136) Important: java-1.5.0-ibm security update
2015-02-05 00:00:00
(RHSA-2015:0067) Critical: java-1.7.0-openjdk security update
2015-01-21 00:00:00
(RHSA-2015:0068) Important: java-1.7.0-openjdk security update
2015-01-20 00:00:00
centos
centos
java security update
2015-01-21 05:35:44
java security update
2015-01-26 19:17:49
java security update
2015-01-21 05:42:52
mageia
mageia
Updated java-1.7.0-openjdk packages fix security vulnerabilities
2015-01-24 17:32:04
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2015-01-21 00:00:00
java-1.7.0-openjdk security update
2015-01-21 00:00:00
java-1.6.0-openjdk security update
2015-01-26 00:00:00
osv
osv
openjdk-6 - security update
2015-02-24 00:00:00
openjdk-6 - security update
2015-01-30 00:00:00
debian
debian
[SECURITY] [DSA 3147-1] openjdk-6 security update
2015-01-30 15:57:23
[SECURITY] [DLA 157-1] openjdk-6 security update
2015-02-24 18:21:15
[SECURITY] [DSA 3144-1] openjdk-7 security update
2015-01-29 21:57:25
amazon
amazon
Important: java-1.6.0-openjdk
2015-02-11 19:38:00
Critical: java-1.7.0-openjdk
2015-01-22 14:18:00
ubuntu
ubuntu
OpenJDK 6 vulnerabilities
2015-01-27 00:00:00
OpenJDK 7 vulnerabilities
2015-01-28 00:00:00
suse
suse
Security update for java-1_7_0-openjdk (important)
2015-02-02 12:04:48
Security update for java-1_7_0-openjdk (important)
2015-03-16 12:05:47
archlinux
archlinux
jre7-openjdk-headless: multiple issues
2015-01-23 00:00:00

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:P/A:N

AI Score

3.9

Confidence

Low

EPSS

0.698

Percentile

98.0%

JSON
Related for CVE-2014-6593
vmware2cvelist1threatpost1nvd2packetstorm2debiancve1veracode1ibm83prion1metasploit1ubuntucve1kaspersky1zdt2openvas30nessus35cve1f54redhat10centos4mageia1oraclelinux3osv2debian3amazon2ubuntu2suse2archlinux1