CVE-2014-6517: Oracle JDK

Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attackers to affect confidentiality via vectors related to JAXP.

Affected products

• Oracle JDK: version 1.6.0 only; version 1.7.0 only
• Oracle JRE: version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
• Oracle JRockit: version r27.8.3 only; version r28.3.3 only

Published 2014-10-15. Last modified 2026-06-17.