CVE-2014-6549
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect...
10.0 HighFix available
CVE-2014-6549 is a high vulnerability (CVSS 10.0) in Oracle Jdk, published October 24, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.58%, the 91st percentile. Fixed in java-1.8.0-openjdk 1:1.8.0.31-1.b13.el6_6.
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
Exploit likelihood
4.58%Up 3.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
- Record
CVE-2014-6549- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
- Record
CVE-2014-6549- Updated
- 2026-11-02
EUVDEUVD-2014-6428 No score
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
- Record
EUVD-2014-6428- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x6cv-xr7v-j9fw No score
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect...
Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
- Record
GHSA-x6cv-xr7v-j9fw- Updated
- 2026-11-02
OSVSUSE-SU-2015:0336-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0336-1- Updated
- 2026-11-02
OSVSUSE-SU-2015:0833-1 No score
Security update for Java OpenJDK
Oracle Critical Patch Update Advisory - October 2014
Description:
A Critical Patch Update (CPU) is a collection of patches for multiple security vulnerabilities.
Find more information here: http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
- Record
SUSE-SU-2015:0833-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-openjdkRed Hat:enterprise_linux:6::client |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::client |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::client |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::client |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::client |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::client |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::client |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::computenode |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::computenode |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::computenode |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
Show 48 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::computenode |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::computenode |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::computenode |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::computenode |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::server |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::server |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::server |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::server |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::server |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::server |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::server |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdkRed Hat:enterprise_linux:6::workstation |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-debuginfoRed Hat:enterprise_linux:6::workstation |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-develRed Hat:enterprise_linux:6::workstation |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-headlessRed Hat:enterprise_linux:6::workstation |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-demoRed Hat:enterprise_linux:6::workstation |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-javadocRed Hat:enterprise_linux:6::workstation |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-openjdk-srcRed Hat:enterprise_linux:6::workstation |
before 1:1.8.0.31-1.b13.el6_6 | 1:1.8.0.31-1.b13.el6_6 |
java-1.8.0-oracleRed Hat:rhel_extras_oracle_java:6 |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-develRed Hat:rhel_extras_oracle_java:6 |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-javafxRed Hat:rhel_extras_oracle_java:6 |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-jdbcRed Hat:rhel_extras_oracle_java:6 |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-pluginRed Hat:rhel_extras_oracle_java:6 |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.8.0-oracle-srcRed Hat:rhel_extras_oracle_java:6 |
before 1:1.8.0.31-1jpp.1.el6 | 1:1.8.0.31-1jpp.1.el6 |
java-1.7.1-ibmRed Hat:rhel_extras:6 |
before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:6 |
before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibm-develRed Hat:rhel_extras:6 |
before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:6 |
before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:6 |
before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:6 |
before 1:1.7.1.2.10-1jpp.3.el6_6 | 1:1.7.1.2.10-1jpp.3.el6_6 |
java-1.7.1-ibmRed Hat:rhel_extras:7 |
before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.1-ibm-demoRed Hat:rhel_extras:7 |
before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.1-ibm-develRed Hat:rhel_extras:7 |
before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.1-ibm-jdbcRed Hat:rhel_extras:7 |
before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.1-ibm-pluginRed Hat:rhel_extras:7 |
before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.1-ibm-srcRed Hat:rhel_extras:7 |
before 1:1.7.1.2.10-1jpp.3.el7_0 | 1:1.7.1.2.10-1jpp.3.el7_0 |
java-1.7.0-ibmRed Hat:rhel_extras:5::client |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::client |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::client |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::client |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::client |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::client |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibmRed Hat:rhel_extras:5::server |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-demoRed Hat:rhel_extras:5::server |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-develRed Hat:rhel_extras:5::server |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-jdbcRed Hat:rhel_extras:5::server |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-pluginRed Hat:rhel_extras:5::server |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
java-1.7.0-ibm-srcRed Hat:rhel_extras:5::server |
before 1:1.7.0.8.10-1jpp.4.el5 | 1:1.7.0.8.10-1jpp.4.el5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
oracle.com/technetwork/topics/security/cpujan2015-1972971.html
lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html
rhn.redhat.com/errata/RHSA-2015-0080.html
www-304.ibm.com/support/docview.wss?uid=swg21695474
security.gentoo.org/glsa/201507-14
securityfocus.com/bid/72137
Show 194 moreShow less
securitytracker.com/id/1031580
nvd.nist.gov/vuln/detail/CVE-2014-6549
github.com/advisories/GHSA-x6cv-xr7v-j9fw
access.redhat.com/errata/RHSA-2015:0069
bugzilla.redhat.com/show_bug.cgi?id=1152789
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0069.json
cve.org/CVERecord?id=CVE-2014-3566
ibm.com/developerworks/java/jdk/alerts
suse.com/support/update/announcement/2015/suse-su-20150336-1
bugzilla.suse.com/828665
This page doesn't list everything
Left out here: 83 references. The JSON record has them.