CVE-2014-4265

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect...

5.0 MediumFix available

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Exploit likelihood

3.23%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Record: CVE-2014-4265
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Record: CVE-2014-4265
Updated: 2026-11-02

EUVDEUVD-2014-4194 No score

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Record: EUVD-2014-4194
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5w9m-3gw9-3c5p No score

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect...

Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment.

Record: GHSA-5w9m-3gw9-3c5p
Updated: 2026-11-02

OSVSUSE-SU-2015:0336-1 No score

Security update for Java OpenJDK

Oracle Critical Patch Update Advisory - October 2014

Description:

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.

Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Record: SUSE-SU-2015:0336-1
Updated: 2026-11-02

OSVSUSE-SU-2015:0343-1 No score

Security update for IBM Java

java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.

These security issues have been fixed:

* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect integrity via unknown vectors related to
  Deployment, a different vulnerability than CVE-2014-6527
  (CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified…

Record: SUSE-SU-2015:0343-1
Updated: 2026-11-02

Show 4 moreShow less

OSVSUSE-SU-2015:0343-2 No score

Security update for IBM Java

java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.

These security issues have been fixed:

* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
  remote attackers to affect integrity via unknown vectors related to
  Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
  remote…

Record: SUSE-SU-2015:0343-2
Updated: 2026-11-02

OSVSUSE-SU-2015:0833-1 No score

Security update for Java OpenJDK

Oracle Critical Patch Update Advisory - October 2014

Description:

A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.

Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

Record: SUSE-SU-2015:0833-1
Updated: 2026-11-02

OSVSUSE-SU-2015:1086-2 No score

Security update for IBM Java

java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.

These security issues has been fixed:

* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
  remote attackers to affect integrity via unknown vectors related to
  Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
  remote…

Record: SUSE-SU-2015:1086-2
Updated: 2026-11-02

OSVSUSE-SU-2015:1086-4 No score

Security update for IBM Java

java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.

These security issues have been fixed:

* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
  products, uses nondeterministic CBC padding, which makes it easier
  for man-in-the-middle attackers to obtain cleartext data via a
  padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
  Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via vectors related to
  AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
  (CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
  (CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment, a different
  vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
  (CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Firefox, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows local users to affect confidentiality, integrity, and
  availability via unknown vectors related to Deployment
  (CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
  when running on Internet Explorer, allows local users to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality, integrity, and availability via unknown vectors
  related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
  remote attackers to affect integrity via unknown vectors related to
  Deployment, a different vulnerability than CVE-2014-6527
  (CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
  allows remote attackers to affect integrity via unknown vectors
  related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20 allows remote attackers to affect confidentiality via unknown
  vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
  8u20, and Java SE Embedded 7u60, allows remote attackers to affect
  confidentiality via unknown vectors related to Libraries
  (CVE-2014-6531).
* Unspecified…

Record: SUSE-SU-2015:1086-4
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`java-1.7.0-oracle` Red Hat:rhel_extras_oracle_java:5	before 1:1.7.0.65-1jpp.2.el5_10	1:1.7.0.65-1jpp.2.el5_10
`java-1.7.0-oracle-devel` Red Hat:rhel_extras_oracle_java:5	before 1:1.7.0.65-1jpp.2.el5_10	1:1.7.0.65-1jpp.2.el5_10
`java-1.7.0-oracle-javafx` Red Hat:rhel_extras_oracle_java:5	before 1:1.7.0.65-1jpp.2.el5_10	1:1.7.0.65-1jpp.2.el5_10
`java-1.7.0-oracle-jdbc` Red Hat:rhel_extras_oracle_java:5	before 1:1.7.0.65-1jpp.2.el5_10	1:1.7.0.65-1jpp.2.el5_10
`java-1.7.0-oracle-plugin` Red Hat:rhel_extras_oracle_java:5	before 1:1.7.0.65-1jpp.2.el5_10	1:1.7.0.65-1jpp.2.el5_10
`java-1.7.0-oracle-src` Red Hat:rhel_extras_oracle_java:5	before 1:1.7.0.65-1jpp.2.el5_10	1:1.7.0.65-1jpp.2.el5_10
`java-1.7.0-oracle` Red Hat:rhel_extras_oracle_java:6	before 1:1.7.0.65-1jpp.1.el6_5	1:1.7.0.65-1jpp.1.el6_5
`java-1.7.0-oracle-devel` Red Hat:rhel_extras_oracle_java:6	before 1:1.7.0.65-1jpp.1.el6_5	1:1.7.0.65-1jpp.1.el6_5
`java-1.7.0-oracle-javafx` Red Hat:rhel_extras_oracle_java:6	before 1:1.7.0.65-1jpp.1.el6_5	1:1.7.0.65-1jpp.1.el6_5
`java-1.7.0-oracle-jdbc` Red Hat:rhel_extras_oracle_java:6	before 1:1.7.0.65-1jpp.1.el6_5	1:1.7.0.65-1jpp.1.el6_5

Show 77 moreShow less

Affected packages
Package	Affected	Fixed
`java-1.7.0-oracle-plugin` Red Hat:rhel_extras_oracle_java:6	before 1:1.7.0.65-1jpp.1.el6_5	1:1.7.0.65-1jpp.1.el6_5
`java-1.7.0-oracle-src` Red Hat:rhel_extras_oracle_java:6	before 1:1.7.0.65-1jpp.1.el6_5	1:1.7.0.65-1jpp.1.el6_5
`java-1.7.0-oracle` Red Hat:rhel_extras_oracle_java:7	before 1:1.7.0.65-1jpp.1.el7	1:1.7.0.65-1jpp.1.el7
`java-1.7.0-oracle-devel` Red Hat:rhel_extras_oracle_java:7	before 1:1.7.0.65-1jpp.1.el7	1:1.7.0.65-1jpp.1.el7
`java-1.7.0-oracle-javafx` Red Hat:rhel_extras_oracle_java:7	before 1:1.7.0.65-1jpp.1.el7	1:1.7.0.65-1jpp.1.el7
`java-1.7.0-oracle-jdbc` Red Hat:rhel_extras_oracle_java:7	before 1:1.7.0.65-1jpp.1.el7	1:1.7.0.65-1jpp.1.el7
`java-1.7.0-oracle-plugin` Red Hat:rhel_extras_oracle_java:7	before 1:1.7.0.65-1jpp.1.el7	1:1.7.0.65-1jpp.1.el7
`java-1.7.0-oracle-src` Red Hat:rhel_extras_oracle_java:7	before 1:1.7.0.65-1jpp.1.el7	1:1.7.0.65-1jpp.1.el7
`java-1.6.0-sun` Red Hat:rhel_extras_oracle_java:5	before 1:1.6.0.81-1jpp.1.el5_10	1:1.6.0.81-1jpp.1.el5_10
`java-1.6.0-sun-demo` Red Hat:rhel_extras_oracle_java:5	before 1:1.6.0.81-1jpp.1.el5_10	1:1.6.0.81-1jpp.1.el5_10
`java-1.6.0-sun-devel` Red Hat:rhel_extras_oracle_java:5	before 1:1.6.0.81-1jpp.1.el5_10	1:1.6.0.81-1jpp.1.el5_10
`java-1.6.0-sun-jdbc` Red Hat:rhel_extras_oracle_java:5	before 1:1.6.0.81-1jpp.1.el5_10	1:1.6.0.81-1jpp.1.el5_10
`java-1.6.0-sun-plugin` Red Hat:rhel_extras_oracle_java:5	before 1:1.6.0.81-1jpp.1.el5_10	1:1.6.0.81-1jpp.1.el5_10
`java-1.6.0-sun-src` Red Hat:rhel_extras_oracle_java:5	before 1:1.6.0.81-1jpp.1.el5_10	1:1.6.0.81-1jpp.1.el5_10
`java-1.6.0-sun` Red Hat:rhel_extras_oracle_java:6	before 1:1.6.0.81-1jpp.1.el6_5	1:1.6.0.81-1jpp.1.el6_5
`java-1.6.0-sun-demo` Red Hat:rhel_extras_oracle_java:6	before 1:1.6.0.81-1jpp.1.el6_5	1:1.6.0.81-1jpp.1.el6_5
`java-1.6.0-sun-devel` Red Hat:rhel_extras_oracle_java:6	before 1:1.6.0.81-1jpp.1.el6_5	1:1.6.0.81-1jpp.1.el6_5
`java-1.6.0-sun-jdbc` Red Hat:rhel_extras_oracle_java:6	before 1:1.6.0.81-1jpp.1.el6_5	1:1.6.0.81-1jpp.1.el6_5
`java-1.6.0-sun-plugin` Red Hat:rhel_extras_oracle_java:6	before 1:1.6.0.81-1jpp.1.el6_5	1:1.6.0.81-1jpp.1.el6_5
`java-1.6.0-sun-src` Red Hat:rhel_extras_oracle_java:6	before 1:1.6.0.81-1jpp.1.el6_5	1:1.6.0.81-1jpp.1.el6_5
`java-1.6.0-sun` Red Hat:rhel_extras_oracle_java:7	before 1:1.6.0.81-1jpp.1.el7	1:1.6.0.81-1jpp.1.el7
`java-1.6.0-sun-demo` Red Hat:rhel_extras_oracle_java:7	before 1:1.6.0.81-1jpp.1.el7	1:1.6.0.81-1jpp.1.el7
`java-1.6.0-sun-devel` Red Hat:rhel_extras_oracle_java:7	before 1:1.6.0.81-1jpp.1.el7	1:1.6.0.81-1jpp.1.el7
`java-1.6.0-sun-jdbc` Red Hat:rhel_extras_oracle_java:7	before 1:1.6.0.81-1jpp.1.el7	1:1.6.0.81-1jpp.1.el7
`java-1.6.0-sun-plugin` Red Hat:rhel_extras_oracle_java:7	before 1:1.6.0.81-1jpp.1.el7	1:1.6.0.81-1jpp.1.el7
`java-1.6.0-sun-src` Red Hat:rhel_extras_oracle_java:7	before 1:1.6.0.81-1jpp.1.el7	1:1.6.0.81-1jpp.1.el7
`java-1.6.0-ibm` Red Hat:rhel_extras:5::client	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-accessibility` Red Hat:rhel_extras:5::client	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-demo` Red Hat:rhel_extras:5::client	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-devel` Red Hat:rhel_extras:5::client	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-javacomm` Red Hat:rhel_extras:5::client	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-jdbc` Red Hat:rhel_extras:5::client	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-plugin` Red Hat:rhel_extras:5::client	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-src` Red Hat:rhel_extras:5::client	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm` Red Hat:rhel_extras:5::server	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-accessibility` Red Hat:rhel_extras:5::server	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-demo` Red Hat:rhel_extras:5::server	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-devel` Red Hat:rhel_extras:5::server	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-javacomm` Red Hat:rhel_extras:5::server	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-jdbc` Red Hat:rhel_extras:5::server	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-plugin` Red Hat:rhel_extras:5::server	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm-src` Red Hat:rhel_extras:5::server	before 1:1.6.0.16.1-1jpp.1.el5_10	1:1.6.0.16.1-1jpp.1.el5_10
`java-1.6.0-ibm` Red Hat:rhel_extras:6	before 1:1.6.0.16.1-1jpp.1.el6_5	1:1.6.0.16.1-1jpp.1.el6_5
`java-1.6.0-ibm-demo` Red Hat:rhel_extras:6	before 1:1.6.0.16.1-1jpp.1.el6_5	1:1.6.0.16.1-1jpp.1.el6_5
`java-1.6.0-ibm-devel` Red Hat:rhel_extras:6	before 1:1.6.0.16.1-1jpp.1.el6_5	1:1.6.0.16.1-1jpp.1.el6_5
`java-1.6.0-ibm-javacomm` Red Hat:rhel_extras:6	before 1:1.6.0.16.1-1jpp.1.el6_5	1:1.6.0.16.1-1jpp.1.el6_5
`java-1.6.0-ibm-jdbc` Red Hat:rhel_extras:6	before 1:1.6.0.16.1-1jpp.1.el6_5	1:1.6.0.16.1-1jpp.1.el6_5
`java-1.6.0-ibm-plugin` Red Hat:rhel_extras:6	before 1:1.6.0.16.1-1jpp.1.el6_5	1:1.6.0.16.1-1jpp.1.el6_5
`java-1.6.0-ibm-src` Red Hat:rhel_extras:6	before 1:1.6.0.16.1-1jpp.1.el6_5	1:1.6.0.16.1-1jpp.1.el6_5
`java-1.7.0-ibm` Red Hat:rhel_extras:5::client	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm-demo` Red Hat:rhel_extras:5::client	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm-devel` Red Hat:rhel_extras:5::client	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm-jdbc` Red Hat:rhel_extras:5::client	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm-plugin` Red Hat:rhel_extras:5::client	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm-src` Red Hat:rhel_extras:5::client	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm` Red Hat:rhel_extras:5::server	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm-demo` Red Hat:rhel_extras:5::server	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm-devel` Red Hat:rhel_extras:5::server	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm-jdbc` Red Hat:rhel_extras:5::server	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm-plugin` Red Hat:rhel_extras:5::server	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm-src` Red Hat:rhel_extras:5::server	before 1:1.7.0.7.1-1jpp.1.el5_10	1:1.7.0.7.1-1jpp.1.el5_10
`java-1.7.0-ibm` Red Hat:rhel_extras:6	before 1:1.7.0.7.1-1jpp.1.el6_5	1:1.7.0.7.1-1jpp.1.el6_5
`java-1.7.0-ibm-demo` Red Hat:rhel_extras:6	before 1:1.7.0.7.1-1jpp.1.el6_5	1:1.7.0.7.1-1jpp.1.el6_5
`java-1.7.0-ibm-devel` Red Hat:rhel_extras:6	before 1:1.7.0.7.1-1jpp.1.el6_5	1:1.7.0.7.1-1jpp.1.el6_5
`java-1.7.0-ibm-jdbc` Red Hat:rhel_extras:6	before 1:1.7.0.7.1-1jpp.1.el6_5	1:1.7.0.7.1-1jpp.1.el6_5
`java-1.7.0-ibm-plugin` Red Hat:rhel_extras:6	before 1:1.7.0.7.1-1jpp.1.el6_5	1:1.7.0.7.1-1jpp.1.el6_5
`java-1.7.0-ibm-src` Red Hat:rhel_extras:6	before 1:1.7.0.7.1-1jpp.1.el6_5	1:1.7.0.7.1-1jpp.1.el6_5
`java-1.7.1-ibm` Red Hat:rhel_extras:7	before 1:1.7.1.1.1-1jpp.1.el7_0	1:1.7.1.1.1-1jpp.1.el7_0
`java-1.7.1-ibm-demo` Red Hat:rhel_extras:7	before 1:1.7.1.1.1-1jpp.1.el7_0	1:1.7.1.1.1-1jpp.1.el7_0
`java-1.7.1-ibm-devel` Red Hat:rhel_extras:7	before 1:1.7.1.1.1-1jpp.1.el7_0	1:1.7.1.1.1-1jpp.1.el7_0
`java-1.7.1-ibm-jdbc` Red Hat:rhel_extras:7	before 1:1.7.1.1.1-1jpp.1.el7_0	1:1.7.1.1.1-1jpp.1.el7_0
`java-1.7.1-ibm-plugin` Red Hat:rhel_extras:7	before 1:1.7.1.1.1-1jpp.1.el7_0	1:1.7.1.1.1-1jpp.1.el7_0
`java-1.7.1-ibm-src` Red Hat:rhel_extras:7	before 1:1.7.1.1.1-1jpp.1.el7_0	1:1.7.1.1.1-1jpp.1.el7_0
`java-1.6.0-ibm` Red Hat:network_satellite:5.6::el5	before 1:1.6.0.16.3-1jpp.1.el5	1:1.6.0.16.3-1jpp.1.el5
`java-1.6.0-ibm-devel` Red Hat:network_satellite:5.6::el5	before 1:1.6.0.16.3-1jpp.1.el5	1:1.6.0.16.3-1jpp.1.el5
`java-1.6.0-ibm` Red Hat:network_satellite:5.6::el6	before 1:1.6.0.16.3-1jpp.1.el6	1:1.6.0.16.3-1jpp.1.el6
`java-1.6.0-ibm-devel` Red Hat:network_satellite:5.6::el6	before 1:1.6.0.16.3-1jpp.1.el6	1:1.6.0.16.3-1jpp.1.el6

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-4265 is a medium vulnerability (CVSS 5.0) in Oracle Jdk, published July 17, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.23%, the 88th percentile. Fixed in java-1.7.0-oracle 1:1.7.0.65-1jpp.2.el5_10.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 337 references and the rest of 4 source descriptions. The JSON record has them.