CVE-2014-0373: oracle jdk
Vulnerability summary
CVE-2014-0373 is a high (CVSS 7.5) vulnerability in oracle jdk. EPSS estimates a 4.29% chance of exploitation in the next 30 days, higher than 91% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 12 · Related 1Timeline
- 15-01-2014PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to throwing of an incorrect exception when SnmpStatusException should have been used in the SNMP implementation, which allows attackers to escape the sandbox.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.29%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
+0.05 pp
From 4.23% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
1 vendor · 2 products
References
28 links- hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/496c51673decX Refsource MISC
- bugzilla.redhat.com/show_bug.cgi?id=1051699X Refsource CONFIRM
Show all 28 references
- www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlX Refsource CONFIRM