CVE-2014-3068: IBM Java

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the private key from a Certificate Management System (CMS) keystore via a brute force attack.

Affected products

• IBM Java: version 5.0.0.0 only; version 5.0.11.0 only; version 5.0.11.1 only; version 5.0.11.2 only; version 5.0.12.0 only; version 5.0.12.1 only; …

Published 2014-12-02. Last modified 2026-06-17.