Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-cjda-feye-v3fd
Vulnerability ID VCID-cjda-feye-v3fd
Aliases CVE-2014-4227
Summary Multiple vulnerabilities have been found in Oracle's Java SE Development Kit and Runtime Environment, the worst of which could lead to execution of arbitrary code.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.10621 https://api.first.org/data/v1/epss?cve=CVE-2014-4227
epss 0.10621 https://api.first.org/data/v1/epss?cve=CVE-2014-4227
epss 0.10621 https://api.first.org/data/v1/epss?cve=CVE-2014-4227
epss 0.10621 https://api.first.org/data/v1/epss?cve=CVE-2014-4227
epss 0.10621 https://api.first.org/data/v1/epss?cve=CVE-2014-4227
epss 0.10621 https://api.first.org/data/v1/epss?cve=CVE-2014-4227
epss 0.10621 https://api.first.org/data/v1/epss?cve=CVE-2014-4227
epss 0.10621 https://api.first.org/data/v1/epss?cve=CVE-2014-4227
epss 0.10621 https://api.first.org/data/v1/epss?cve=CVE-2014-4227
epss 0.10621 https://api.first.org/data/v1/epss?cve=CVE-2014-4227
cvssv2 10.0 https://nvd.nist.gov/vuln/detail/CVE-2014-4227
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html
http://marc.info/?l=bugtraq&m=140852974709252&w=2
http://rhn.redhat.com/errata/RHSA-2015-0264.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-4227.json
https://api.first.org/data/v1/epss?cve=CVE-2014-4227
http://seclists.org/fulldisclosure/2014/Dec/23
http://secunia.com/advisories/59404
http://secunia.com/advisories/59680
http://secunia.com/advisories/59924
http://secunia.com/advisories/59986
http://secunia.com/advisories/59987
http://secunia.com/advisories/60081
http://secunia.com/advisories/60245
http://secunia.com/advisories/60317
http://secunia.com/advisories/60622
http://secunia.com/advisories/60817
http://secunia.com/advisories/61577
http://secunia.com/advisories/61640
http://security.gentoo.org/glsa/glsa-201502-12.xml
https://exchange.xforce.ibmcloud.com/vulnerabilities/94588
http://www-01.ibm.com/support/docview.wss?uid=swg21680334
http://www-01.ibm.com/support/docview.wss?uid=swg21686383
http://www-01.ibm.com/support/docview.wss?uid=swg21686824
http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
http://www.securityfocus.com/archive/1/534161/100/0/threaded
http://www.securityfocus.com/bid/68603
http://www.securitytracker.com/id/1030577
http://www.vmware.com/security/advisories/VMSA-2014-0012.html
1119912 https://bugzilla.redhat.com/show_bug.cgi?id=1119912
cpe:2.3:a:oracle:jdk:1.6.0:update75:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jdk:1.6.0:update75:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.7.0:update60:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jdk:1.7.0:update60:*:*:*:*:*:*
cpe:2.3:a:oracle:jdk:1.8.0:update5:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jdk:1.8.0:update5:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.6.0:update75:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jre:1.6.0:update75:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.7.0:update60:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jre:1.7.0:update60:*:*:*:*:*:*
cpe:2.3:a:oracle:jre:1.8.0:update5:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:oracle:jre:1.8.0:update5:*:*:*:*:*:*
CVE-2014-4227 https://nvd.nist.gov/vuln/detail/CVE-2014-4227
GLSA-201502-12 https://security.gentoo.org/glsa/201502-12
RHSA-2014:0902 https://access.redhat.com/errata/RHSA-2014:0902
RHSA-2014:0908 https://access.redhat.com/errata/RHSA-2014:0908
RHSA-2014:1033 https://access.redhat.com/errata/RHSA-2014:1033
RHSA-2014:1041 https://access.redhat.com/errata/RHSA-2014:1041
RHSA-2014:1042 https://access.redhat.com/errata/RHSA-2014:1042
RHSA-2015:0264 https://access.redhat.com/errata/RHSA-2015:0264
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2014-4227
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.93265
EPSS Score 0.10621
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:02:02.276553+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201502-12 38.0.0