CVE-2014-6593: Oracle JDK

Medium severity, CVSS 4.0. EPSS: 66.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

Affected products

• Oracle JDK: version 1.5.0 only; version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
• Oracle JRE: version 1.5.0 only; version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
• Oracle JRockit: version r27.8.4 only; version r28.3.4 only

Published 2015-01-21. Last modified 2026-06-17.