CVE-2014-4263: Oracle JDK

Medium severity, CVSS 4.0. EPSS: 3.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement."

Affected products

• Oracle JDK: version 1.5.0 only; version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
• Oracle JRE: version 1.5.0 only; version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
• Oracle JRockit: version r27.8.2 only; version r28.3.2 only

Published 2014-07-17. Last modified 2026-06-17.