CVE-2014-2422

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-04-16 · updated 2026-06-17

Description

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and JavaFX 2.2.51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

Affected products

Oracle Javafx: 2.2.51
Oracle Java SE: 1.7.0-update51, 1.8.0
Oracle Java SE: 1.7.0-update51, 1.8.0

References

http://marc.info/?l=bugtraq&m=140852886808946&w=2
http://security.gentoo.org/glsa/glsa-201502-12.xml
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
http://www.securityfocus.com/bid/66912
https://access.redhat.com/errata/RHSA-2014:0413
http://marc.info/?l=bugtraq&m=140852886808946&w=2
http://security.gentoo.org/glsa/glsa-201502-12.xml
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
http://www.securityfocus.com/bid/66912
https://access.redhat.com/errata/RHSA-2014:0413

Get alerted when CVE-2014-2422 or the next vulnerability affects your stack