CVE-2014-4208

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-17 · updated 2026-06-17

Description

Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4220.

Affected products

Oracle Java SE: 1.7.0-update60, 1.8.0-update5
Oracle Java SE: 1.7.0-update60, 1.8.0-update5

References

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
http://marc.info/?l=bugtraq&m=140852886808946&w=2
http://seclists.org/fulldisclosure/2014/Dec/23
http://secunia.com/advisories/59680
http://secunia.com/advisories/59924
http://secunia.com/advisories/59987
http://secunia.com/advisories/60081
http://secunia.com/advisories/60317
http://secunia.com/advisories/60622
http://secunia.com/advisories/60817
http://secunia.com/advisories/61293
http://secunia.com/advisories/61577

Get alerted when CVE-2014-4208 or the next vulnerability affects your stack