CVE-2014-6558

low

Published 2014-10-15 · Modified 2026-05-06

CVSS v3

—

CVSS v2

2.6

VIR risk

2.6

Description

Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and JRockit R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Security.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2014-6558

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html

OS impact

OS	Version	Status	Fixed in
debian	sid	fixed	`8u40~b09-1`

Application impact

Vendor	Product	Versions
oracle	jrockit	`r27.8.3`
oracle	jrockit	`r28.3.3`
oracle	jdk	`1.5.0`
oracle	jdk	`1.6.0`
oracle	jdk	`1.7.0`
oracle	jre	`1.5.0`
oracle	jre	`1.6.0`
oracle	jre	`1.7.0`
oracle	jre	`1.8.0`

References

Verify integrity in audit chain (admin only). AS-IS.