CVE-2014-0408
Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers...
9.3 High
Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
Exploit likelihood
4.37%Up 2.4 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
CVE-2014-0408- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
CVE-2014-0408- Updated
- 2026-11-02
EUVDEUVD-2014-0446 No score
Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
EUVD-2014-0446- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jhmh-wxf9-fc28 No score
Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers...
Unspecified vulnerability in Oracle Java SE 7u45, when running on OS X, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.
- Record
GHSA-jhmh-wxf9-fc28- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10534-1 No score
java-1_7_0-openjdk-1.7.0.121-1.1 on GA media
These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10534-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1_7_0-openjdkopenSUSE:Tumbleweed From an advisory covering 304 CVEs |
before 1.7.0.121-1.1 | 1.7.0.121-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0408 is a high vulnerability (CVSS 9.3) in Oracle Jre, published January 15, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.37%, the 91st percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-updates/2014-01/msg00105.html
ubuntu.com/usn/USN-2089-1
secunia.com/advisories/56485
osvdb.org/101999
securitytracker.com/id/1029608
securityfocus.com/bid/64758
Show 194 moreShow less
oracle.com/technetwork/topics/security/cpujan2014-1972949.html
nvd.nist.gov/vuln/detail/CVE-2014-0408
github.com/advisories/GHSA-jhmh-wxf9-fc28
suse.com/security/cve/CVE-2011-3563
This page doesn't list everything
Left out here: 116 references. The JSON record has them.