CVE-2014-0460

Name: CVE-2014-0460
Creator: NVD / NIST
Published: 2014-04-16T01:55:09.993+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 4.32%

Last modified Jun 17, 2026

CVE-2014-0460 is a vulnerability of currently unknown severity. Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.. EPSS estimates a 4.32% chance of exploitation in the next 30 days.

Description

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

Metrics

EPSS Probability

4.32%

89.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions	Update
Oracle	Jrockit	r27.8.1	—
Oracle	Jrockit	r28.3.1	—
Canonical	Ubuntu Linux	10.04	—
Canonical	Ubuntu Linux	12.04	—
Canonical	Ubuntu Linux	12.10	—
Canonical	Ubuntu Linux	13.10	—
Canonical	Ubuntu Linux	14.04	—
Juniper	Junos Space	< 15.1	—
Oracle	Jdk	1.5.0	Update61
Oracle	Jdk	1.6.0	Update71
Oracle	Jdk	1.7.0	Update51
Oracle	Jdk	1.8.0	—
Oracle	Jre	1.5.0	Update61
Oracle	Jre	1.6.0	Update71
Oracle	Jre	1.7.0	Update51
Oracle	Jre	1.8.0	—
Debian	Debian Linux	6.0	—
Debian	Debian Linux	7.0	—
Debian	Debian Linux	8.0	—

References

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698Third Party Advisory
http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue Tracking, Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2Issue Tracking, Mailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
http://secunia.com/advisories/58415Third Party Advisory
http://secunia.com/advisories/59022Third Party Advisory
http://secunia.com/advisories/59023Third Party Advisory
http://secunia.com/advisories/59058Third Party Advisory
http://secunia.com/advisories/59071Third Party Advisory
http://secunia.com/advisories/59082Third Party Advisory
http://secunia.com/advisories/59250Third Party Advisory
http://secunia.com/advisories/59255Third Party Advisory
http://secunia.com/advisories/59307Third Party Advisory
http://secunia.com/advisories/59436Third Party Advisory
http://secunia.com/advisories/59516Third Party Advisory
http://secunia.com/advisories/59642Third Party Advisory
http://secunia.com/advisories/59704Third Party Advisory
http://secunia.com/advisories/59705Third Party Advisory
http://secunia.com/advisories/59706Third Party Advisory
http://secunia.com/advisories/60003Third Party Advisory
http://secunia.com/advisories/60111Third Party Advisory
http://secunia.com/advisories/60117Third Party Advisory
http://secunia.com/advisories/61264Third Party Advisory
http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672080Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21673836Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21674539Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676315Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21676672Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676746Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21677294Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21679713Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21681018Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21681256Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21683484Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21686717Third Party Advisory
http://www.debian.org/security/2014/dsa-2912Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21675343Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21675588Broken Link
http://www.ibm.com/support/docview.wss?uid=swg21677387Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
http://www.securityfocus.com/bid/66916Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2191-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698Third Party Advisory
http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue Tracking, Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2Issue Tracking, Mailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
http://secunia.com/advisories/58415Third Party Advisory
http://secunia.com/advisories/59022Third Party Advisory
http://secunia.com/advisories/59023Third Party Advisory
http://secunia.com/advisories/59058Third Party Advisory
http://secunia.com/advisories/59071Third Party Advisory
http://secunia.com/advisories/59082Third Party Advisory
http://secunia.com/advisories/59250Third Party Advisory
http://secunia.com/advisories/59255Third Party Advisory
http://secunia.com/advisories/59307Third Party Advisory
http://secunia.com/advisories/59436Third Party Advisory
http://secunia.com/advisories/59516Third Party Advisory
http://secunia.com/advisories/59642Third Party Advisory
http://secunia.com/advisories/59704Third Party Advisory
http://secunia.com/advisories/59705Third Party Advisory
http://secunia.com/advisories/59706Third Party Advisory
http://secunia.com/advisories/60003Third Party Advisory
http://secunia.com/advisories/60111Third Party Advisory
http://secunia.com/advisories/60117Third Party Advisory
http://secunia.com/advisories/61264Third Party Advisory
http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672080Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21673836Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21674539Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676315Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21676672Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676746Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21677294Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21679713Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21681018Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21681256Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21683484Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21686717Third Party Advisory
http://www.debian.org/security/2014/dsa-2912Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21675343Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21675588Broken Link
http://www.ibm.com/support/docview.wss?uid=swg21677387Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
http://www.securityfocus.com/bid/66916Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2191-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory

Timeline

Published: Apr 16, 2014
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-0460?

How severe is CVE-2014-0460?

Severity scoring for CVE-2014-0460 is pending analysis. The EPSS model estimates a 4.32% probability of exploitation in the next 30 days.

How do I fix CVE-2014-0460?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-0460?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST