CVE-2014-6468
Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality,...
6.8 Medium
Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Exploit likelihood
2.71%Up 1.4 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
CVE-2014-6468- CVSS 2.0
- 6.8 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
CVE-2014-6468- Updated
- 2026-11-02
EUVDEUVD-2014-6347 No score
Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
EUVD-2014-6347- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fx6v-47q8-469f No score
Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality,...
Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
GHSA-fx6v-47q8-469f- Updated
- 2026-11-02
OSVSUSE-SU-2015:0336-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0336-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0833-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0833-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::client From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::computenode From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
Show 18 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::server From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::workstation From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 12 CVEs |
before 0:1.8.0.25-1.b17.el6 | 0:1.8.0.25-1.b17.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-6468 is a medium vulnerability (CVSS 6.8) in Oracle Jdk, published October 15, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.71%, the 86th percentile. No source names a fixed version.
References
secunia.com/advisories/61609
securityfocus.com/bid/70488
rhn.redhat.com/errata/RHSA-2014-1636.html
oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
Show 194 moreShow less
linux.oracle.com/errata/ELSA-2014-1636
security.gentoo.org/glsa/glsa-201502-12.xml
www-01.ibm.com/support/docview.wss?uid=swg21692299
nvd.nist.gov/vuln/detail/CVE-2014-6468
github.com/advisories/GHSA-fx6v-47q8-469f
access.redhat.com/errata/RHSA-2014:1636
bugzilla.redhat.com/show_bug.cgi?id=1071210
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1636.json
cve.org/CVERecord?id=CVE-2014-6457
suse.com/support/update/announcement/2015/suse-su-20150336-1
bugzilla.suse.com/828665
This page doesn't list everything
Left out here: 46 references. The JSON record has them.