CVE-2014-6593: Medium severity oracle java se vulnerability

Published Jan 21, 2015

Updated

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

Affected Software

14 affected components

ORACLE Jrockit=r27.8.4

ORACLE Jrockit=r28.3.4

Oracle JDK=1.5.0-update75

Oracle JDK=1.6.0-update85

Oracle JDK=1.7.0-update71

Oracle JDK=1.7.0-update72

Oracle JDK=1.8.0-update25

Oracle JDK=1.8.0-update6

ORACLE JRE=1.5.0-update75

ORACLE JRE=1.6.0-update85

ORACLE JRE=1.7.0-update71

ORACLE JRE=1.7.0-update72

ORACLE JRE=1.8.0-update25

ORACLE JRE=1.8.0-update6

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html

Event History

Jan 21, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-6593?

CVE-2014-6593 is considered a critical vulnerability that can impact both confidentiality and integrity.

How do I fix CVE-2014-6593?

To fix CVE-2014-6593, you should update your Java SE or JRockit installations to the latest version provided by Oracle.

What software is affected by CVE-2014-6593?

CVE-2014-6593 affects Oracle Java SE versions 5.0u75, 6u85, 7u72, 8u25, as well as JRockit versions 27.8.4 and 28.3.4.

Can CVE-2014-6593 be exploited remotely?

Yes, CVE-2014-6593 can be exploited by remote attackers, potentially allowing unauthorized access to sensitive data.

What are the potential impacts of CVE-2014-6593?

The potential impacts of CVE-2014-6593 include unauthorized access, data leaks, and manipulation of sensitive information.