System	Score	Found at
epss	0.00695	https://api.first.org/data/v1/epss?cve=CVE-2014-1585
epss	0.00695	https://api.first.org/data/v1/epss?cve=CVE-2014-1585
epss	0.00695	https://api.first.org/data/v1/epss?cve=CVE-2014-1585
epss	0.00695	https://api.first.org/data/v1/epss?cve=CVE-2014-1585
epss	0.00695	https://api.first.org/data/v1/epss?cve=CVE-2014-1585
epss	0.00695	https://api.first.org/data/v1/epss?cve=CVE-2014-1585
epss	0.00695	https://api.first.org/data/v1/epss?cve=CVE-2014-1585
epss	0.00695	https://api.first.org/data/v1/epss?cve=CVE-2014-1585
epss	0.00695	https://api.first.org/data/v1/epss?cve=CVE-2014-1585
cvssv2	5.0	https://nvd.nist.gov/vuln/detail/CVE-2014-1585
generic_textual	none	https://www.mozilla.org/en-US/security/advisories/mfsa2014-81

Reference id	Reference type	URL
		http://lists.fedoraproject.org/pipermail/package-announce/2014-November/141796.html
		http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141085.html
		http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00024.html
		http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html
		http://lists.opensuse.org/opensuse-updates/2014-11/msg00000.html
		http://lists.opensuse.org/opensuse-updates/2014-11/msg00001.html
		http://lists.opensuse.org/opensuse-updates/2014-11/msg00002.html
		http://lists.opensuse.org/opensuse-updates/2014-11/msg00003.html
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1585.json
		https://api.first.org/data/v1/epss?cve=CVE-2014-1585
		https://bugzilla.mozilla.org/show_bug.cgi?id=1062876
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1574
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1576
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1577
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1578
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1581
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1583
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1585
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1586
		http://secunia.com/advisories/61387
		http://secunia.com/advisories/62021
		http://secunia.com/advisories/62022
		http://secunia.com/advisories/62023
		http://www.debian.org/security/2014/dsa-3050
		http://www.debian.org/security/2014/dsa-3061
		http://www.mozilla.org/security/announce/2014/mfsa2014-81.html
		http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
		http://www.securityfocus.com/bid/70425
		http://www.securitytracker.com/id/1031028
		http://www.securitytracker.com/id/1031030
		http://www.ubuntu.com/usn/USN-2372-1
		http://www.ubuntu.com/usn/USN-2373-1
1152366		https://bugzilla.redhat.com/show_bug.cgi?id=1152366
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:30.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:30.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:31.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:firefox:31.1.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:31.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:31.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:31.1.0:*:*:*:*:*:*:*		https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:mozilla:thunderbird:31.1.0:*:*:*:*:*:*:*
CVE-2014-1585		https://nvd.nist.gov/vuln/detail/CVE-2014-1585
GLSA-201504-01		https://security.gentoo.org/glsa/201504-01
mfsa2014-81		https://www.mozilla.org/en-US/security/advisories/mfsa2014-81
USN-2372-1		https://usn.ubuntu.com/2372-1/
USN-2373-1		https://usn.ubuntu.com/2373-1/

No exploits are available.

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2014-1585

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Percentile	0.71868
EPSS Score	0.00695
Published At	April 1, 2026, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2026-04-01T13:10:23.218812+00:00	Debian Oval Importer	Import	https://www.debian.org/security/oval/oval-definitions-wheezy.xml.bz2	38.0.0