CVE-2014-6457: Medium severity oracle java se vulnerability

Published Oct 15, 2014

Updated

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

Affected Software

12 affected components

ORACLE Jrockit=r27.8.3

ORACLE Jrockit=r28.3.3

Oracle JDK=1.5.0-update_71

Oracle JDK=1.6.0-update81

Oracle JDK=1.7.0-update60

Oracle JDK=1.7.0-update67

Oracle JDK=1.8.0-update20

ORACLE JRE=1.5.0-update_71

ORACLE JRE=1.6.0-update_81

ORACLE JRE=1.7.0-update_67

ORACLE JRE=1.7.0-update60

ORACLE JRE=1.8.0-update_20

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Event History

Oct 15, 2014

CVE Published

via MITRE·03:15 PM

Data Sourced

via MITRE·03:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6457?

CVE-2014-6457 is considered a critical vulnerability that impacts confidentiality and integrity.

How do I fix CVE-2014-6457?

To remediate CVE-2014-6457, update your Oracle Java SE and JRockit to the latest versions provided by Oracle.

Which versions are affected by CVE-2014-6457?

CVE-2014-6457 affects Oracle Java SE versions 5.0u71, 6u81, 7u67, 8u20, and certain JRockit versions.

What are the potential impacts of CVE-2014-6457?

The vulnerability in CVE-2014-6457 may allow remote attackers to compromise the confidentiality and integrity of affected systems.

Is CVE-2014-6457 still a risk today?

CVE-2014-6457 remains a risk for systems still using the vulnerable versions of Oracle Java SE and JRockit without updates.