What’s Vulnerable › Vulnerabilities

CVE-2014-2398

• Severity: low (CVSS 3.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-16 · updated 2026-06-17

Description

Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

Affected products

• Canonical Ubuntu Linux: 10.04, 12.04, 12.10, 13.10, 14.04
• Debian Linux: 6.0, 7.0, 8.0
• IBM Forms Viewer: from 4.0.0 before 4.0.0.3; from 8.0.0 before 8.0.1.1 — fixed in 4.0.0.3, 8.0.1.1
• Oracle Javafx: 2.2.51
• Oracle Java SE: 1.5.0-update61, 1.6.0-update71, 1.7.0-update51, 1.8.0
• Oracle Java SE: 1.5.0-update61, 1.6.0-update71, 1.7.0-update51, 1.8.0
• Oracle JRockit: r27.8.1, r28.3.1

How to fix

Upgrade to a fixed version: IBM Forms Viewer 4.0.0.3, 8.0.1.1. Check the vendor advisory for mitigations.

References

• http://marc.info/?l=bugtraq&m=140852886808946&w=2
• http://marc.info/?l=bugtraq&m=140852974709252&w=2
• http://rhn.redhat.com/errata/RHSA-2014-0675.html
• http://rhn.redhat.com/errata/RHSA-2014-0685.html
• http://secunia.com/advisories/58415
• http://secunia.com/advisories/59058
• http://security.gentoo.org/glsa/glsa-201406-32.xml
• http://security.gentoo.org/glsa/glsa-201502-12.xml
• http://www-01.ibm.com/support/docview.wss?uid=swg21672080
• http://www-01.ibm.com/support/docview.wss?uid=swg21676746
• http://www.debian.org/security/2014/dsa-2912
• http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html

Get alerted when CVE-2014-2398 or the next vulnerability affects your stack