CVE-2014-3065
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7...
6.9 Medium
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.
Exploit likelihood
0.56%Down 1.6 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.
- Record
CVE-2014-3065- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.
- Record
CVE-2014-3065- Updated
- 2026-11-02
EUVDEUVD-2014-3086No score
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.
- Record
EUVD-2014-3086- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7f48-7whf-6c52No score
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7...
Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local users to execute arbitrary code via vectors related to the shared classes cache.
- Record
GHSA-7f48-7whf-6c52- Weakness
- CWE-94
- Updated
- 2026-11-02
OSVSUSE-SU-2015:0343-1No score
Security update for IBM Java
java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.
These security issues have been fixed:
* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect confidentiality, integrity, and
availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect integrity via unknown vectors related to
Deployment, a different vulnerability than CVE-2014-6527
(CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified…
- Record
SUSE-SU-2015:0343-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0343-2No score
Security update for IBM Java
java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.
These security issues have been fixed:
* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
remote attackers to affect integrity via unknown vectors related to
Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
remote…
- Record
SUSE-SU-2015:0343-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-2No score
Security update for IBM Java
java-1_6_0-ibm has been updated to version 1.6.0_sr16.2 to fix 18 security issues.
These security issues has been fixed:
* Unspecified vulnerability in Oracle Java SE 6u81 (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows
remote attackers to affect integrity via unknown vectors related to
Libraries (CVE-2014-6512).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows
remote…
- Record
SUSE-SU-2015:1086-2- Updated
- 2026-11-02
OSVSUSE-SU-2015:1086-4No score
Security update for IBM Java
java-1_7_0-ibm has been updated to version 1.7.0_sr7.2 to fix 21 security issues.
These security issues have been fixed:
* Unspecified vulnerability (CVE-2014-3065).
* The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other
products, uses nondeterministic CBC padding, which makes it easier
for man-in-the-middle attackers to obtain cleartext data via a
padding-oracle attack, aka the 'POODLE' issue (CVE-2014-3566).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, and
Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via vectors related to
AWT (CVE-2014-6513).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect confidentiality, integrity, and
availability via unknown vectors (CVE-2014-6456).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6532
(CVE-2014-6503).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6493, and CVE-2014-6503
(CVE-2014-6532).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-4288).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment, a different
vulnerability than CVE-2014-4288, CVE-2014-6503, and CVE-2014-6532
(CVE-2014-6493).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Firefox, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6492).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows local users to affect confidentiality, integrity, and
availability via unknown vectors related to Deployment
(CVE-2014-6458).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20,
when running on Internet Explorer, allows local users to affect
confidentiality, integrity, and availability via unknown vectors
related to Deployment (CVE-2014-6466).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality, integrity, and availability via unknown vectors
related to Libraries (CVE-2014-6506).
* Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows
remote attackers to affect integrity via unknown vectors related to
Deployment, a different vulnerability than CVE-2014-6527
(CVE-2014-6476).
* Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20
allows remote attackers to affect integrity via unknown vectors
related to Deployment (CVE-2014-6515).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20 allows remote attackers to affect confidentiality via unknown
vectors related to 2D (CVE-2014-6511).
* Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and
8u20, and Java SE Embedded 7u60, allows remote attackers to affect
confidentiality via unknown vectors related to Libraries
(CVE-2014-6531).
* Unspecified…
- Record
SUSE-SU-2015:1086-4- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
Show 70 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el5 | 1:1.7.0.8.0-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el5 | 1:1.6.0.16.2-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:rhel_extras:6 From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el6_6 | 1:1.6.0.16.2-1jpp.1.el6_6 |
java-1.6.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el6_6 | 1:1.6.0.16.2-1jpp.1.el6_6 |
java-1.6.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el6_6 | 1:1.6.0.16.2-1jpp.1.el6_6 |
java-1.6.0-ibm-javacommRed Hat:rhel_extras:6 From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el6_6 | 1:1.6.0.16.2-1jpp.1.el6_6 |
java-1.6.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el6_6 | 1:1.6.0.16.2-1jpp.1.el6_6 |
java-1.6.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el6_6 | 1:1.6.0.16.2-1jpp.1.el6_6 |
java-1.6.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 16 CVEs | before 1:1.6.0.16.2-1jpp.1.el6_6 | 1:1.6.0.16.2-1jpp.1.el6_6 |
java-1.7.1-ibmRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el6_6 | 1:1.7.1.2.0-1jpp.3.el6_6 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el6_6 | 1:1.7.1.2.0-1jpp.3.el6_6 |
java-1.7.1-ibm-develRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el6_6 | 1:1.7.1.2.0-1jpp.3.el6_6 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el6_6 | 1:1.7.1.2.0-1jpp.3.el6_6 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el6_6 | 1:1.7.1.2.0-1jpp.3.el6_6 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el6_6 | 1:1.7.1.2.0-1jpp.3.el6_6 |
java-1.7.1-ibmRed Hat:rhel_extras:7 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el7_0 | 1:1.7.1.2.0-1jpp.3.el7_0 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:7 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el7_0 | 1:1.7.1.2.0-1jpp.3.el7_0 |
java-1.7.1-ibm-develRed Hat:rhel_extras:7 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el7_0 | 1:1.7.1.2.0-1jpp.3.el7_0 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:7 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el7_0 | 1:1.7.1.2.0-1jpp.3.el7_0 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:7 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el7_0 | 1:1.7.1.2.0-1jpp.3.el7_0 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:7 From an advisory covering 19 CVEs | before 1:1.7.1.2.0-1jpp.3.el7_0 | 1:1.7.1.2.0-1jpp.3.el7_0 |
java-1.5.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-accessibilityRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el5 | 1:1.5.0.16.8-1jpp.1.el5 |
java-1.5.0-ibmRed Hat:rhel_extras:6 From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el6_6 | 1:1.5.0.16.8-1jpp.1.el6_6 |
java-1.5.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el6_6 | 1:1.5.0.16.8-1jpp.1.el6_6 |
java-1.5.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el6_6 | 1:1.5.0.16.8-1jpp.1.el6_6 |
java-1.5.0-ibm-javacommRed Hat:rhel_extras:6 From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el6_6 | 1:1.5.0.16.8-1jpp.1.el6_6 |
java-1.5.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el6_6 | 1:1.5.0.16.8-1jpp.1.el6_6 |
java-1.5.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el6_6 | 1:1.5.0.16.8-1jpp.1.el6_6 |
java-1.5.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 9 CVEs | before 1:1.5.0.16.8-1jpp.1.el6_6 | 1:1.5.0.16.8-1jpp.1.el6_6 |
java-1.7.0-ibmRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el6_6 | 1:1.7.0.8.0-1jpp.1.el6_6 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el6_6 | 1:1.7.0.8.0-1jpp.1.el6_6 |
java-1.7.0-ibm-develRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el6_6 | 1:1.7.0.8.0-1jpp.1.el6_6 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el6_6 | 1:1.7.0.8.0-1jpp.1.el6_6 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el6_6 | 1:1.7.0.8.0-1jpp.1.el6_6 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 19 CVEs | before 1:1.7.0.8.0-1jpp.1.el6_6 | 1:1.7.0.8.0-1jpp.1.el6_6 |
java-1.6.0-ibmRed Hat:network_satellite:5.6::el5 From an advisory covering 40 CVEs | before 1:1.6.0.16.3-1jpp.1.el5 | 1:1.6.0.16.3-1jpp.1.el5 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.6::el5 From an advisory covering 40 CVEs | before 1:1.6.0.16.3-1jpp.1.el5 | 1:1.6.0.16.3-1jpp.1.el5 |
java-1.6.0-ibmRed Hat:network_satellite:5.6::el6 From an advisory covering 40 CVEs | before 1:1.6.0.16.3-1jpp.1.el6 | 1:1.6.0.16.3-1jpp.1.el6 |
java-1.6.0-ibm-develRed Hat:network_satellite:5.6::el6 From an advisory covering 40 CVEs | before 1:1.6.0.16.3-1jpp.1.el6 | 1:1.6.0.16.3-1jpp.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3065 is a medium vulnerability (CVSS 6.9) in Ibm Java, published November 19, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 47th percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2014-1880.html
www-01.ibm.com/support/docview.wss?uid=swg1IV66045
Show 194 moreShow less
lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html
bugzilla.redhat.com/show_bug.cgi?id=1162554
securityfocus.com/bid/71147
nvd.nist.gov/vuln/detail/CVE-2014-3065
github.com/advisories/GHSA-7f48-7whf-6c52
access.redhat.com/errata/RHSA-2014:1876
ibm.com/developerworks/java/jdk/alerts
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1876.json
cve.org/CVERecord?id=CVE-2014-3065
oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
xforce.iss.net/xforce/xfdb/93756
suse.com/support/update/announcement/2015/suse-su-20150343-1
bugzilla.suse.com/592934
This page doesn't list everything
Left out here: 251 references and the rest of 4 source descriptions. The JSON record has them.