Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2014-6593

71
FAUCET Score

CVE-2014-6593 is an unspecified vulnerability within the Java Secure Socket Extension (JSSE) component of Oracle Java SE, Java SE Embedded, and JRockit, affecting confidentiality and integrity. With a CVSS score of 4.0, this vulnerability has a network attack vector and high attack complexity, allowing remote attackers to partially compromise data. While not actively exploited in the wild (KEV), public exploit code exists, including a Metasploit module and an ExploitDB entry, indicating a high potential for exploitation. The vulnerability has garnered significant community attention and media coverage, reflected in its high EPSS and FAUCET Risk Score.

Impacted Technologies

VendorProductVersion(s)CPE
r27.8.4CPE matchmatch criteria
cpe:2.3:a:oracle:jrockit:r27.8.4:*:*:*:*:*:*:*
r28.3.4CPE matchmatch criteria
cpe:2.3:a:oracle:jrockit:r28.3.4:*:*:*:*:*:*:*
1.5.0CPE matchmatch criteria
cpe:2.3:a:oracle:jdk:1.5.0:update75:*:*:*:*:*:*
1.6.0CPE matchmatch criteria
cpe:2.3:a:oracle:jdk:1.6.0:update85:*:*:*:*:*:*
1.7.0CPE matchmatch criteria
cpe:2.3:a:oracle:jdk:1.7.0:update71:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.0MEDIUM

AV:N/AC:H/Au:N/C:P/I:P/A:N

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Exploitability Score
4.9
Impact Score
4.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
67.23%
Probability of exploitation in next 30 days
EPSS Percentile
99.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
Metasploit: Java Secure Socket Extension (JSSE) SKIP-TLS MITM Proxy · Jan 20, 2015
ExploitDB: EDB-38641 · Nov 5, 2015
This CVE's current EPSS score of 0.6723 is in the 100th percentile among its peer group of 19,956 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (24)

oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 5Fixed in: java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el5_11
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 5Fixed in: java-1.6.0-sun-1:1.6.0.91-1jpp.1.el5_11
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 6Fixed in: java-1.7.0-oracle-1:1.7.0.75-1jpp.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 6Fixed in: java-1.8.0-oracle-1:1.8.0.31-1jpp.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 6Fixed in: java-1.6.0-sun-1:1.6.0.91-1jpp.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 7Fixed in: java-1.7.0-oracle-1:1.7.0.75-1jpp.2.el7
View patch
redhatpatch availablevia redhat_api
Product: Oracle Java for Red Hat Enterprise Linux 7Fixed in: java-1.6.0-sun-1:1.6.0.91-1jpp.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el5_11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el5_11
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5 SupplementaryFixed in: java-1.7.0-ibm-1:1.7.0.8.10-1jpp.4.el5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5 SupplementaryFixed in: java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5 SupplementaryFixed in: java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: java-1.7.0-openjdk-1:1.7.0.75-2.5.4.0.el6_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: java-1.8.0-openjdk-1:1.8.0.31-1.b13.el6_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el6_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: java-1.7.0-openjdk-1:1.7.0.75-2.5.4.2.el7_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: java-1.6.0-openjdk-1:1.6.0.34-1.13.6.1.el7_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Satellite 5.6Fixed in: java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Satellite 5.7Fixed in: java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 6Fixed in: java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el6_6
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 6Fixed in: java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6_6
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 6Fixed in: java-1.5.0-ibm-1:1.5.0.16.9-1jpp.1.el6_6
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 7Fixed in: java-1.7.1-ibm-1:1.7.1.2.10-1jpp.3.el7_0
View patch

Vendor Advisories (1)

redhatCVE-2014-6593Moderate

OpenJDK: incorrect tracking of ChangeCipherSpec during SSL/TLS handshake (JSSE, 8057555)

Jan 20, 2015

References

h20564.www2.hp.com / hpsc/doc/public/display
lists.opensuse.org / opensuse-security-announce/2015-02/msg00001.html
lists.opensuse.org / opensuse-security-announce/2015-02/msg00024.html
lists.opensuse.org / opensuse-security-announce/2015-03/msg00018.html
marc.info
marc.info
packetstormsecurity.com / files/134251/Java-Secure-Socket-Extension-JSSE-SKIP-TLS.html
rhn.redhat.com / errata/RHSA-2015-0068.html
rhn.redhat.com / errata/RHSA-2015-0079.html
rhn.redhat.com / errata/RHSA-2015-0080.html
rhn.redhat.com / errata/RHSA-2015-0085.html
rhn.redhat.com / errata/RHSA-2015-0086.html
rhn.redhat.com / errata/RHSA-2015-0136.html
rhn.redhat.com / errata/RHSA-2015-0264.html
kc.mcafee.com / corporate/index
security.gentoo.org / glsa/201507-14
security.gentoo.org / glsa/201603-14
www-304.ibm.com / support/docview.wss
exploit-db.com / exploits/38641
debian.org / security/2015/dsa-3144
debian.org / security/2015/dsa-3147
oracle.com / technetwork/topics/security/cpujan2015-1972971.html
PatchVendor Advisory
securityfocus.com / bid/72169
securitytracker.com / id/1031580
ubuntu.com / usn/USN-2486-1
ubuntu.com / usn/USN-2487-1
vmware.com / security/advisories/VMSA-2015-0003.html