{"id":"CVE-2014-0411","url":"https://www.cyber-defence.io/tools/cve/CVE-2014-0411","generatedAt":"2026-10-27T19:52:38.605Z","title":"Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.","description":"Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.  NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue allows remote attackers to obtain sensitive information about encryption keys via a timing discrepancy during the TLS/SSL handshake.","published":"2014-01-15T16:08:10.000Z","lastModified":"2026-06-17T00:02:58.000Z","status":"Modified","sourceIdentifier":"secalert_us@oracle.com","cvss":{"version":"2.0","score":4,"severity":"MEDIUM","vector":"AV:N/AC:H/Au:N/C:P/I:P/A:N"},"cwe":[],"affected":["oracle/jrockit","oracle/jre","oracle/jdk"],"epss":{"score":0.02348,"percentile":0.83569,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (2.35%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/d533e96c7acc","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00009.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-02/msg00012.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00024.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html","source":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html","source":"secalert_us@oracle.com"},{"url":"http://marc.info/?l=bugtraq&m=139402697611681&w=2","source":"secalert_us@oracle.com"},{"url":"http://marc.info/?l=bugtraq&m=139402749111889&w=2","source":"secalert_us@oracle.com"},{"url":"http://osvdb.org/102028","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0026.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0027.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0030.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0097.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0134.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0135.html","source":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2014-0136.html","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/56432","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/56485","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/56486","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/56487","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/56535","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/57809","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59037","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59071","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59082","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59194","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59235","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59251","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59254","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59283","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59324","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59339","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59665","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59704","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59705","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/59872","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/60005","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/60498","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/60833","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/60835","source":"secalert_us@oracle.com"},{"url":"http://secunia.com/advisories/60836","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=ssg1S1004656","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21669519","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21675938","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676190","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676373","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21676978","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21677388","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21680234","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21680387","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682668","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682669","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682670","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682671","source":"secalert_us@oracle.com"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21682904","source":"secalert_us@oracle.com"},{"url":"http://www-947.ibm.com/support/entry/portal/docdisplay?lndocid=MIGR-5096132","source":"secalert_us@oracle.com"},{"url":"http://www.ibm.com/support/docview.wss?uid=ssg1S1004745","source":"secalert_us@oracle.com"},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21672078","source":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html","tags":["Vendor Advisory"],"source":"secalert_us@oracle.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-0411","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}