CVE-2014-4244

14

FAUCET Score

CVE-2014-4244 is an unspecified vulnerability within the Security component of Oracle Java SE (versions 5.0u65, 6u75, 7u60, 8u5) and JRockit (R27.8.2, R28.3.2). This vulnerability has a CVSS score of 4.0, indicating a medium severity, and allows remote attackers to compromise confidentiality and integrity with high attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		1.5.0CPE matchmatch criteria	cpe:2.3:a:oracle:jdk:1.5.0:update65::::::
		1.6.0CPE matchmatch criteria	cpe:2.3:a:oracle:jdk:1.6.0:update75::::::
		1.7.0CPE matchmatch criteria	cpe:2.3:a:oracle:jdk:1.7.0:update60::::::
		1.8.0CPE matchmatch criteria	cpe:2.3:a:oracle:jdk:1.8.0:update5::::::
		1.5.0CPE matchmatch criteria	cpe:2.3:a:oracle:jre:1.5.0:update65::::::

CVSS Data

CVSS version used by this source: 2.0

4.0MEDIUM

AV:N/AC:H/Au:N/C:P/I:P/A:N

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Exploitability Score

4.9

Impact Score

4.9

CvssVersion

2.0

Exploit Intelligence

EPSS Score

3.50%

Probability of exploitation in next 30 days

EPSS Percentile

87.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0350 is in the 83rd percentile among its peer group of 19,958 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (21)

redhatpatch availablevia redhat_api

Product: Oracle Java for Red Hat Enterprise Linux 5Fixed in: java-1.7.0-oracle-1:1.7.0.65-1jpp.2.el5_10

redhatpatch availablevia redhat_api

Product: Oracle Java for Red Hat Enterprise Linux 5Fixed in: java-1.6.0-sun-1:1.6.0.81-1jpp.1.el5_10

redhatpatch availablevia redhat_api

Product: Oracle Java for Red Hat Enterprise Linux 6Fixed in: java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Oracle Java for Red Hat Enterprise Linux 6Fixed in: java-1.6.0-sun-1:1.6.0.81-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Oracle Java for Red Hat Enterprise Linux 7Fixed in: java-1.7.0-oracle-1:1.7.0.65-1jpp.1.el7

redhatpatch availablevia redhat_api

Product: Oracle Java for Red Hat Enterprise Linux 7Fixed in: java-1.6.0-sun-1:1.6.0.81-1jpp.1.el7

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el5_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 5Fixed in: java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el5_10

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el6_5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 6Fixed in: java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el6_5

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: java-1.7.0-openjdk-1:1.7.0.65-2.5.1.2.el7_0

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: java-1.6.0-openjdk-1:1.6.0.0-6.1.13.4.el7_0

redhatpatch availablevia redhat_api

Product: Red Hat Satellite 5.6Fixed in: java-1.6.0-ibm-1:1.6.0.16.3-1jpp.1.el6

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el5_10

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el5_10

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el5_10

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 6Fixed in: java-1.6.0-ibm-1:1.6.0.16.1-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 6Fixed in: java-1.5.0-ibm-1:1.5.0.16.7-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 6Fixed in: java-1.7.0-ibm-1:1.7.0.7.1-1jpp.1.el6_5

redhatpatch availablevia redhat_api

Product: Supplementary for Red Hat Enterprise Linux 7Fixed in: java-1.7.1-ibm-1:1.7.1.1.1-1jpp.1.el7_0

oraclevendor investigatingvia nvd_reference

Vendor Advisories (1)

redhatCVE-2014-4244Moderate

OpenJDK: RSA blinding issues (Security, 8031346)

References

lists.opensuse.org / opensuse-security-announce/2015-02/msg00026.html

lists.opensuse.org / opensuse-security-announce/2015-02/msg00033.html

lists.opensuse.org / opensuse-security-announce/2015-02/msg00036.html

rhn.redhat.com / errata/RHSA-2015-0264.html

access.redhat.com / errata/RHSA-2014:0902

access.redhat.com / errata/RHSA-2014:0908

seclists.org / fulldisclosure/2014/Dec/23

secunia.com / advisories/58830

secunia.com / advisories/59404

secunia.com / advisories/59503

secunia.com / advisories/59680

secunia.com / advisories/59924

secunia.com / advisories/59985

secunia.com / advisories/59986

secunia.com / advisories/59987

secunia.com / advisories/60002

secunia.com / advisories/60031

secunia.com / advisories/60032

secunia.com / advisories/60081

secunia.com / advisories/60129

secunia.com / advisories/60245

secunia.com / advisories/60317

secunia.com / advisories/60326

secunia.com / advisories/60335

secunia.com / advisories/60485

secunia.com / advisories/60497

secunia.com / advisories/60622

secunia.com / advisories/60812

secunia.com / advisories/60817

secunia.com / advisories/60831

secunia.com / advisories/60846

secunia.com / advisories/60890

secunia.com / advisories/61050

secunia.com / advisories/61215

secunia.com / advisories/61254

secunia.com / advisories/61264

secunia.com / advisories/61278

secunia.com / advisories/61293

secunia.com / advisories/61294

secunia.com / advisories/61417

secunia.com / advisories/61469

secunia.com / advisories/61577

secunia.com / advisories/61640

secunia.com / advisories/61846

secunia.com / advisories/62314

security.gentoo.org / glsa/glsa-201502-12.xml

exchange.xforce.ibmcloud.com / vulnerabilities/94605

kc.mcafee.com / corporate/index

ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

www-01.ibm.com / support/docview.wss

debian.org / security/2014/dsa-2980

debian.org / security/2014/dsa-2987

ibm.com / support/docview.wss

oracle.com / technetwork/topics/security/cpujul2014-1972956.html

Vendor Advisory

securityfocus.com / archive/1/534161/100/0/threaded

securityfocus.com / bid/68624

securitytracker.com / id/1030577

vmware.com / security/advisories/VMSA-2014-0012.html