Unrated severityNVD Advisory· Published Jan 21, 2015· Updated Jun 17, 2026
CVE-2014-6593
CVE-2014-6593
Description
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
21cpe:2.3:a:oracle:jdk:1.5.0:update75:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:oracle:jdk:1.5.0:update75:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.6.0:update85:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.7.0:update71:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.7.0:update72:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.8.0:update25:*:*:*:*:*:*
- cpe:2.3:a:oracle:jdk:1.8.0:update6:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.5.0:update75:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:oracle:jre:1.5.0:update75:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.6.0:update85:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.7.0:update71:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.7.0:update72:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.8.0:update25:*:*:*:*:*:*
- cpe:2.3:a:oracle:jre:1.8.0:update6:*:*:*:*:*:*
cpe:2.3:a:oracle:jrockit:r27.8.4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oracle:jrockit:r27.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:jrockit:r28.3.4:*:*:*:*:*:*:*
- (no CPE)range: 27.8.4, 28.3.4
- Range: 5.0u75, 6u85, 7u72, 8u25
- Range: 7u71, 8u6
- osv-coords4 versionspkg:rpm/opensuse/java-1_7_0-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Desktop%2012pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012pkg:rpm/suse/java-1_7_0-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012
< 1.7.0.121-1.1+ 3 more
- (no CPE)range: < 1.7.0.121-1.1
- (no CPE)range: < 1.7.0.75-11.3
- (no CPE)range: < 1.7.0.75-11.3
- (no CPE)range: < 1.7.0.75-11.3
Patches
Vulnerability mechanics
References
27- www.oracle.com/technetwork/topics/security/cpujan2015-1972971.htmlnvdPatchVendor Advisory
- h20564.www2.hp.com/hpsc/doc/public/displaynvd
- lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.htmlnvd
- marc.infonvd
- marc.infonvd
- packetstormsecurity.com/files/134251/Java-Secure-Socket-Extension-JSSE-SKIP-TLS.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-0068.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-0079.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-0080.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-0085.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-0086.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-0136.htmlnvd
- rhn.redhat.com/errata/RHSA-2015-0264.htmlnvd
- www.debian.org/security/2015/dsa-3144nvd
- www.debian.org/security/2015/dsa-3147nvd
- www.securityfocus.com/bid/72169nvd
- www.securitytracker.com/id/1031580nvd
- www.ubuntu.com/usn/USN-2486-1nvd
- www.ubuntu.com/usn/USN-2487-1nvd
- www.vmware.com/security/advisories/VMSA-2015-0003.htmlnvd
- kc.mcafee.com/corporate/indexnvd
- security.gentoo.org/glsa/201507-14nvd
- security.gentoo.org/glsa/201603-14nvd
- www-304.ibm.com/support/docview.wssnvd
- www.exploit-db.com/exploits/38641/nvd
News mentions
0No linked articles in our index yet.