CVE-2014-2405

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and...

10.0 High

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462.

Exploit likelihood

2.28%Up 1.3 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462.

Record: CVE-2014-2405
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462.

Record: CVE-2014-2405
Updated: 2026-11-02

EUVDEUVD-2014-2441 No score

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462.

Record: EUVD-2014-2441
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vjx6-8q4g-9hpf No score

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and...

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462.

Record: GHSA-vjx6-8q4g-9hpf
Updated: 2026-11-02

OSVUBUNTU-CVE-2014-2405 No score

Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462.

Record: UBUNTU-CVE-2014-2405
Updated: 2026-11-02

Affected products

oracle openjdk

Affected packages

Affected packages
Package	Affected	Fixed
`openjdk-6` Debian:6.0 From an advisory covering 22 CVEs	before 6b31-1.13.3-1~deb6u1, plus listed versions 6b18-1.8.10-0+squeeze16b18-1.8.10-0+squeeze26b18-1.8.10-0~lenny16b18-1.8.10-0~lenny26b18-1.8.13-0+squeeze1 Show 45 moreShow less 6b18-1.8.13-0+squeeze26b18-1.8.3-26b18-1.8.3-2+squeeze16b18-1.8.4-16b18-1.8.5-16b18-1.8.7-16b18-1.8.7-26b18-1.8.7-2~lenny16b18-1.8.7-2~squeeze16b18-1.8.7-36b18-1.8.7-46b18-1.8.7-56b18-1.8.9-0.16b18-1.8.9-0.1~squeeze16b20-1.9-16b20-1.9.1-16b20-1.9.2-16b20-1.9.2-26b20~pre1-16b20~pre1-26b21~pre1-16b22-1.10-16b22-1.10-26b22-1.10-36b22-1.10.1-16b22-1.10.1~pre1-16b23~pre10-16b23~pre11-16b23~pre2-16b23~pre2-26b23~pre3-16b23~pre4-16b23~pre4-26b23~pre5-16b23~pre6-16b23~pre6-1+s390x6b23~pre7-16b23~pre8-16b23~pre8-26b23~pre9-16b23~pre9-26b24-1.11-16b24-1.11-26b24-1.11-36b24-1.11-4	6b31-1.13.3-1~deb6u1
`openjdk-6` Debian:7 From an advisory covering 22 CVEs	before 6b31-1.13.3-1~deb7u1, plus listed versions 6b27-1.12.5-16b27-1.12.5-26b27-1.12.6-16b27-1.12.6-1~deb6u16b27-1.12.6-1~deb7u1 Show 8 moreShow less 6b27-1.12.7-16b27-1.12.7-26b29-1.13.0-16b29-1.13.0-26b30-1.13.1-16b30-1.13.2-16b30-1.13.2-26b31-1.13.3-1~deb6u1	6b31-1.13.3-1~deb7u1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-2405 is a high vulnerability (CVSS 10.0) in Oracle Openjdk, published April 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.28%, the 83rd percentile. No source names a fixed version.

References

This page doesn't list everything

Left out here: 33 versions. The JSON record has them.