What’s Vulnerable › Vulnerabilities

CVE-2014-0460

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-16 · updated 2026-06-17

Description

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.

Affected products

• Canonical Ubuntu Linux: 10.04, 12.04, 12.10, 13.10, 14.04
• Debian Linux: 6.0, 7.0, 8.0
• Juniper Networks Junos Space: before 15.1 — fixed in 15.1
• Oracle Java SE: 1.5.0-update61, 1.6.0-update71, 1.7.0-update51, 1.8.0
• Oracle Java SE: 1.5.0-update61, 1.6.0-update71, 1.7.0-update51, 1.8.0
• Oracle JRockit: r27.8.1, r28.3.1

How to fix

Upgrade to a fixed version: Juniper Networks Junos Space 15.1. Check the vendor advisory for mitigations.

References

• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698
• http://marc.info/?l=bugtraq&m=140852886808946&w=2
• http://marc.info/?l=bugtraq&m=140852974709252&w=2
• http://rhn.redhat.com/errata/RHSA-2014-0675.html
• http://rhn.redhat.com/errata/RHSA-2014-0685.html
• http://secunia.com/advisories/58415
• http://secunia.com/advisories/59022
• http://secunia.com/advisories/59023
• http://secunia.com/advisories/59058
• http://secunia.com/advisories/59071
• http://secunia.com/advisories/59082
• http://secunia.com/advisories/59250

Get alerted when CVE-2014-0460 or the next vulnerability affects your stack