CVE-2014-4268

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-07-17 · updated 2026-06-17

Description

Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Swing.

Affected products

Oracle Java SE: 1.5.0-update65, 1.6.0-update75, 1.7.0-update60, 1.8.0-update5
Oracle Java SE: 1.5.0-update65, 1.6.0-update75, 1.7.0-update60, 1.8.0-update5

References

http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
http://marc.info/?l=bugtraq&m=140852886808946&w=2
http://marc.info/?l=bugtraq&m=140852974709252&w=2
http://seclists.org/fulldisclosure/2014/Dec/23
http://secunia.com/advisories/59404
http://secunia.com/advisories/59680
http://secunia.com/advisories/60081
http://secunia.com/advisories/60129
http://secunia.com/advisories/60317
http://secunia.com/advisories/60485

Get alerted when CVE-2014-4268 or the next vulnerability affects your stack