CVE-2014-4220
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect...
5.0 Medium
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4208.
Exploit likelihood
3.19%Down 1.2 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4208.
- Record
CVE-2014-4220- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4208.
- Record
CVE-2014-4220- Updated
- 2026-11-02
EUVDEUVD-2014-4149 No score
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4208.
- Record
EUVD-2014-4149- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rgv6-rg5r-4v8m No score
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect...
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4208.
- Record
GHSA-rgv6-rg5r-4v8m- Updated
- 2026-11-02
OSVSUSE-SU-2015:0336-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0336-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0343-1 No score
Security update for IBM Java
java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.
These security issues have been fixed:
* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect confidentiality, integrity, and
availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect integrity via unknown vectors related to
Deployment, a different vulnerability than CVE-2014-6527
(CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified…
- Record
SUSE-SU-2015:0343-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0833-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0833-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-4 No score
Security update for IBM Java
java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.
These security issues have been fixed:
* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect confidentiality, integrity, and
availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect integrity via unknown vectors related to
Deployment, a different vulnerability than CVE-2014-6527
(CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified…
- Record
SUSE-SU-2015:1086-4- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.2.el5_10 | 1:1.7.0.65-1jpp.2.el5_10 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
Show 32 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el6_5 | 1:1.7.0.65-1jpp.1.el6_5 |
java-1.7.0-oracleRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-oracle-develRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-oracle-srcRed Hat:rhel_extras_oracle_java:7 From an advisory covering 18 CVEs |
before 1:1.7.0.65-1jpp.1.el7 | 1:1.7.0.65-1jpp.1.el7 |
java-1.7.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el5_10 | 1:1.7.0.7.1-1jpp.1.el5_10 |
java-1.7.0-ibmRed Hat:rhel_extras:6 From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 15 CVEs |
before 1:1.7.0.7.1-1jpp.1.el6_5 | 1:1.7.0.7.1-1jpp.1.el6_5 |
java-1.7.1-ibmRed Hat:rhel_extras:7 From an advisory covering 15 CVEs |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:7 From an advisory covering 15 CVEs |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.7.1-ibm-develRed Hat:rhel_extras:7 From an advisory covering 15 CVEs |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:7 From an advisory covering 15 CVEs |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:7 From an advisory covering 15 CVEs |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:7 From an advisory covering 15 CVEs |
before 1:1.7.1.1.1-1jpp.1.el7_0 | 1:1.7.1.1.1-1jpp.1.el7_0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-4220 is a medium vulnerability (CVSS 5.0) in Oracle Jdk, published July 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.19%, the 88th percentile. No source names a fixed version.
References
vmware.com/security/advisories/VMSA-2014-0012.html
marc.info?l=bugtraq&m=140852886808946&w=2
securitytracker.com/id/1030577
secunia.com/advisories/59987
exchange.xforce.ibmcloud.com/vulnerabilities/94598
securityfocus.com/archive/1/534161/100/0/threaded
Show 194 moreShow less
oracle.com/technetwork/topics/security/cpujul2014-1972956.html
www-01.ibm.com/support/docview.wss?uid=swg21686383
seclists.org/fulldisclosure/2014/Dec/23
access.redhat.com/errata/RHSA-2014:0902
security.gentoo.org/glsa/glsa-201502-12.xml
lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
nvd.nist.gov/vuln/detail/CVE-2014-4220
github.com/advisories/GHSA-rgv6-rg5r-4v8m
bugzilla.redhat.com/show_bug.cgi?id=1075795
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0902.json
cve.org/CVERecord?id=CVE-2014-2483
ibm.com/developerworks/java/jdk/alerts
xforce.iss.net/xforce/xfdb/93756
suse.com/support/update/announcement/2015/suse-su-20150336-1
bugzilla.suse.com/828665
This page doesn't list everything
Left out here: 202 references and the rest of 2 source descriptions. The JSON record has them.