CVE-2014-4220

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-17 · updated 2026-06-17

Description

Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4208.

Affected products

Oracle Java SE: 1.7.0-update60, 1.8.0-update5
Oracle Java SE: 1.7.0-update60, 1.8.0-update5

References

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
http://marc.info/?l=bugtraq&m=140852886808946&w=2
http://seclists.org/fulldisclosure/2014/Dec/23
http://secunia.com/advisories/59680
http://secunia.com/advisories/59924
http://secunia.com/advisories/59987
http://secunia.com/advisories/60081
http://secunia.com/advisories/60317
http://secunia.com/advisories/60622
http://secunia.com/advisories/60817
http://secunia.com/advisories/61577
http://secunia.com/advisories/61640

Get alerted when CVE-2014-4220 or the next vulnerability affects your stack