CVE-2014-3086

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-12 · updated 2026-06-17

Description

Unspecified vulnerability in the IBM Java Virtual Machine, as used in IBM WebSphere Real Time 3 before Service Refresh 7 FP1 and other products, allows remote attackers to gain privileges by leveraging the ability to execute code in the context of a security manager.

Affected products

IBM Lotus Domino: 8.5.3.0, 9.0.1.0
IBM Lotus Notes: 8.5.3.0, 9.0.1.0
IBM Websphere Real Time: 3.0

References

http://secunia.com/advisories/59680
http://secunia.com/advisories/60081
http://secunia.com/advisories/60317
http://secunia.com/advisories/60622
http://secunia.com/advisories/61577
http://secunia.com/advisories/61640
http://www-01.ibm.com/support/docview.wss?uid=swg1IV62634
http://www-01.ibm.com/support/docview.wss?uid=swg21680333
http://www-01.ibm.com/support/docview.wss?uid=swg21680334
http://www-01.ibm.com/support/docview.wss?uid=swg21686383
http://www-01.ibm.com/support/docview.wss?uid=swg21686824
http://www.securityfocus.com/bid/69183

Get alerted when CVE-2014-3086 or the next vulnerability affects your stack