Search for vulnerabilities
| Vulnerability ID | VCID-ucdc-3fpd-9yhp |
| Aliases |
CVE-2014-6593
|
| Summary | Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.7 |
| Risk | 0.3 |
| Affected and Fixed Packages | Package Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| epss | 0.72836 | https://api.first.org/data/v1/epss?cve=CVE-2014-6593 |
| Data source | Metasploit |
|---|---|
| Description | This module exploits an incomplete internal state distinction in Java Secure Socket Extension (JSSE) by impersonating the server and finishing the handshake before the peers have authenticated themselves and instantiated negotiated security parameters, resulting in a plaintext SSL/TLS session with the client. This plaintext SSL/TLS session is then proxied to the server using a second SSL/TLS session from the proxy to the server (or an alternate fake server) allowing the session to continue normally and plaintext application data transmitted between the peers to be saved. This module requires an active man-in-the-middle attack. |
| Note | {}
|
| Ransomware campaign use | Unknown |
| Source publication date | Jan. 20, 2015 |
| Source URL | https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/server/jsse_skiptls_mitm_proxy.rb |
| Data source | Exploit-DB |
|---|---|
| Date added | Nov. 5, 2015 |
| Description | JSSE - SKIP-TLS |
| Ransomware campaign use | Unknown |
| Source publication date | Nov. 5, 2015 |
| Exploit type | webapps |
| Platform | multiple |
| Source update date | Nov. 5, 2015 |
| Percentile | 0.98794 |
| EPSS Score | 0.72836 |
| Published At | June 4, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-06-04T17:05:36.670017+00:00 | Debian Importer | Import | https://security-tracker.debian.org/tracker/data/json | 38.6.0 |