CVE-2014-0460

17

FAUCET Score

CVE-2014-0460 is an unspecified vulnerability in Oracle Java SE, JRockit, and Java SE Embedded that allows remote attackers to compromise confidentiality and integrity through JNDI-related vectors. With a CVSS score of 5.8, it has a network attack vector, medium attack complexity, and requires no authentication, potentially leading to partial confidentiality and integrity impacts. There is no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. The vulnerability has garnered minimal community discussion and media coverage, suggesting low public awareness and exploitation interest.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		r27.8.1CPE matchmatch criteria	cpe:2.3:a:oracle:jrockit:r27.8.1:::::::*
		r28.3.1CPE matchmatch criteria	cpe:2.3:a:oracle:jrockit:r28.3.1:::::::*
		10.04CPE matchmatch criteria	cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::
		12.04CPE matchmatch criteria	cpe:2.3:o:canonical:ubuntu_linux:12.04::::-:::
		12.10CPE matchmatch criteria	cpe:2.3:o:canonical:ubuntu_linux:12.10:::::::*

CVSS Data

CVSS version used by this source: 2.0

5.8MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:N

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Exploitability Score

8.6

Impact Score

4.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

4.35%

Probability of exploitation in next 30 days

EPSS Percentile

90.2%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0435 is in the 87th percentile among its peer group of 19,958 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (23)

redhatpatch availablevia redhat_api

Product: Oracle Java for Red Hat Enterprise Linux 5Fixed in: java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10

redhatpatch availablevia redhat_api

Product: Oracle Java for Red Hat Enterprise Linux 5Fixed in: java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10

redhatpatch availablevia redhat_api

Product: Oracle Java for Red Hat Enterprise Linux 6Fixed in: java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Oracle Java for Red Hat Enterprise Linux 6Fixed in: java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el5_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el5_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: java-1.7.0-openjdk-1:1.7.0.55-2.4.7.1.el6_5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: java-1.6.0-openjdk-1:1.6.0.0-5.1.13.3.el6_5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: java-1.7.0-openjdk-1:1.7.0.55-2.4.7.2.el7_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: java-1.6.0-openjdk-1:1.6.0.0-6.1.13.3.el7_0

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.4Fixed in: java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el5

redhatpatch availablevia redhat_api

Product: Red Hat Network Satellite Server v 5.5Fixed in: java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el5

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 5.6Fixed in: java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el5

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.7.0-oracle-1:1.7.0.55-1jpp.2.el5_10

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el5_10

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el5_10

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el5_10

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 6Fixed in: java-1.7.0-oracle-1:1.7.0.55-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 6Fixed in: java-1.7.0-ibm-1:1.7.0.7.0-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 6Fixed in: java-1.6.0-ibm-1:1.6.0.16.0-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 6Fixed in: java-1.5.0-ibm-1:1.5.0.16.6-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 7Fixed in: java-1.7.1-ibm-1:1.7.1.1.0-1jpp.2.el7_0

oraclevendor investigatingvia nvd_reference

Vendor Advisories (1)

redhatCVE-2014-0460Moderate

OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)

References

kb.juniper.net / InfoCenter/index

Third Party Advisory

Issue TrackingMailing ListThird Party Advisory

Issue TrackingMailing ListThird Party Advisory

rhn.redhat.com / errata/RHSA-2014-0675.html

Third Party Advisory

rhn.redhat.com / errata/RHSA-2014-0685.html

Third Party Advisory

access.redhat.com / errata/RHSA-2014:0413

Third Party Advisory

access.redhat.com / errata/RHSA-2014:0414

Third Party Advisory

secunia.com / advisories/58415

Third Party Advisory

secunia.com / advisories/59022

Third Party Advisory

secunia.com / advisories/59023

Third Party Advisory

secunia.com / advisories/59058

Third Party Advisory

secunia.com / advisories/59071

Third Party Advisory

secunia.com / advisories/59082

Third Party Advisory

secunia.com / advisories/59250

Third Party Advisory

secunia.com / advisories/59255

Third Party Advisory

secunia.com / advisories/59307

Third Party Advisory

secunia.com / advisories/59436

Third Party Advisory

secunia.com / advisories/59516

Third Party Advisory

secunia.com / advisories/59642

Third Party Advisory

secunia.com / advisories/59704

Third Party Advisory

secunia.com / advisories/59705

Third Party Advisory

secunia.com / advisories/59706

Third Party Advisory

secunia.com / advisories/60003

Third Party Advisory

secunia.com / advisories/60111

Third Party Advisory

secunia.com / advisories/60117

Third Party Advisory

secunia.com / advisories/61264

Third Party Advisory

security.gentoo.org / glsa/glsa-201406-32.xml

Third Party Advisory

security.gentoo.org / glsa/glsa-201502-12.xml

Third Party Advisory

www-01.ibm.com / support/docview.wss

Third Party Advisory

www-01.ibm.com / support/docview.wss

Third Party Advisory

www-01.ibm.com / support/docview.wss

Third Party Advisory

www-01.ibm.com / support/docview.wss

Broken Link

www-01.ibm.com / support/docview.wss

Third Party Advisory

www-01.ibm.com / support/docview.wss

Third Party Advisory

www-01.ibm.com / support/docview.wss

Broken Link

www-01.ibm.com / support/docview.wss

Third Party Advisory

www-01.ibm.com / support/docview.wss

Broken Link

www-01.ibm.com / support/docview.wss

Third Party Advisory

www-01.ibm.com / support/docview.wss

Broken Link

www-01.ibm.com / support/docview.wss

Third Party Advisory

debian.org / security/2014/dsa-2912

Third Party Advisory

ibm.com / support/docview.wss

Third Party Advisory

ibm.com / support/docview.wss

Broken Link

ibm.com / support/docview.wss

Third Party Advisory

oracle.com / technetwork/topics/security/cpuapr2014-1972952.html

Vendor Advisory

securityfocus.com / bid/66916

Third Party AdvisoryVDB Entry

ubuntu.com / usn/USN-2187-1

Third Party Advisory

ubuntu.com / usn/USN-2191-1

Third Party Advisory