CVE-2014-2398

Name: CVE-2014-2398
Creator: NVD / NIST
Published: 2014-04-16T01:55:10.337+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.55%

Last modified Jun 17, 2026

CVE-2014-2398 is a vulnerability of currently unknown severity. Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.. EPSS estimates a 2.55% chance of exploitation in the next 30 days.

Description

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

Metrics

EPSS Probability

2.55%

83.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions	Update
Canonical	Ubuntu Linux	10.04	—
Canonical	Ubuntu Linux	12.04	—
Canonical	Ubuntu Linux	12.10	—
Canonical	Ubuntu Linux	13.10	—
Canonical	Ubuntu Linux	14.04	—
Oracle	Javafx	2.2.51	—
Oracle	Jdk	1.5.0	Update61
Oracle	Jdk	1.6.0	Update71
Oracle	Jdk	1.7.0	Update51
Oracle	Jdk	1.8.0	—
Oracle	Jre	1.5.0	Update61
Oracle	Jre	1.6.0	Update71
Oracle	Jre	1.7.0	Update51
Oracle	Jre	1.8.0	—
Oracle	Jrockit	r27.8.1	—
Oracle	Jrockit	r28.3.1	—
Debian	Debian Linux	6.0	—
Debian	Debian Linux	7.0	—
Debian	Debian Linux	8.0	—
Ibm	Forms Viewer	>= 4.0.0, < 4.0.0.3	—
Ibm	Forms Viewer	>= 8.0.0, < 8.0.1.1	—

References

http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue Tracking, Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2Issue Tracking, Mailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
http://secunia.com/advisories/58415Third Party Advisory
http://secunia.com/advisories/59058Third Party Advisory
http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672080Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676746Broken Link
http://www.debian.org/security/2014/dsa-2912Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
http://www.securityfocus.com/bid/66920Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2191-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory
http://marc.info/?l=bugtraq&m=140852886808946&w=2Issue Tracking, Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=140852974709252&w=2Issue Tracking, Mailing List, Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0675.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2014-0685.htmlThird Party Advisory
http://secunia.com/advisories/58415Third Party Advisory
http://secunia.com/advisories/59058Third Party Advisory
http://security.gentoo.org/glsa/glsa-201406-32.xmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201502-12.xmlThird Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21672080Third Party Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676746Broken Link
http://www.debian.org/security/2014/dsa-2912Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlVendor Advisory
http://www.securityfocus.com/bid/66920Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2187-1Third Party Advisory
http://www.ubuntu.com/usn/USN-2191-1Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0413Third Party Advisory
https://access.redhat.com/errata/RHSA-2014:0414Third Party Advisory

Timeline

Published: Apr 16, 2014
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2014-2398?

How severe is CVE-2014-2398?

Severity scoring for CVE-2014-2398 is pending analysis. The EPSS model estimates a 2.55% probability of exploitation in the next 30 days.

How do I fix CVE-2014-2398?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2014-2398?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST