CVE-2014-6549
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect...
10.0 High
CVE-2014-6549 is a high vulnerability (CVSS 10.0) in Oracle Jdk, published October 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.58%, the 91st percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 4.58%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Exploit likelihood
4.58%Up 3.3 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-openjdkRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
Show 48 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs | before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs | before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs | before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs | before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs | before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 18 CVEs | before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.7.1-ibmRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibm-develRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:6 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibmRed Hat:rhel_extras:7 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:7 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.1-ibm-develRed Hat:rhel_extras:7 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:7 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:7 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:7 From an advisory covering 13 CVEs | before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.0-ibmRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::client From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server From an advisory covering 13 CVEs | before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
- Record
CVE-2014-6549- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
- Record
CVE-2014-6549- Updated
- 2026-11-02
EUVDEUVD-2014-6428No score
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
- Record
EUVD-2014-6428- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x6cv-xr7v-j9fwNo score
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect...
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
- Record
GHSA-x6cv-xr7v-j9fw- Updated
- 2026-11-02
OSVSUSE-SU-2015:0336-1No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0336-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0833-1No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0833-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
oracle.com/technetwork/topics/security/cpujan2015-1972971.html
lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
rhn.redhat.com/errata/RHSA-2015-0080.html
www-304.ibm.com/support/docview.wss?uid=swg21695474
security.gentoo.org/glsa/201507-14
securityfocus.com/bid/72137
Show 194 moreShow less
securitytracker.com/id/1031580
nvd.nist.gov/vuln/detail/CVE-2014-6549
github.com/advisories/GHSA-x6cv-xr7v-j9fw
access.redhat.com/errata/RHSA-2015:0069
bugzilla.redhat.com/show_bug.cgi?id=1152789
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0069.json
cve.org/CVERecord?id=CVE-2014-3566
ibm.com/developerworks/java/jdk/alerts
suse.com/support/update/announcement/2015/suse-su-20150336-1
bugzilla.suse.com/828665
This page doesn't list everything
Left out here: 83 references. The JSON record has them.