CVE-2014-0463
published 2014-04-16CVE-2014-0463: Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different…
PriorityP422medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
2.47%
82.9th percentile
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | jdk | — | — |
| oracle | jre | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)
vendor_redhat·2014-04-15·CVSS 4.3
CVE-2014-0464 [MEDIUM] JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)
JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0463.
Package: java-1.5.0-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.6.0-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.7.0-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.7.0-oracle (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.5.0-ibm (Red Hat Enterprise Linux 6) - Not affected
Package: java-1.6.0-ibm (Red Hat Enterprise Linux 6) - Not affected
Package: java-1.7.0-ibm (Red Hat Enterprise Linux 6) - Not affected
Package: java-1.7.0-oracle (Red Hat Enterprise Linux 6) - Not
Red Hat
JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)
vendor_redhat·2014-04-15·CVSS 4.3
CVE-2014-0463 [MEDIUM] JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)
JDK: unspecified vulnerabilities fixed in 8u5 (JavaFX, Scripting)
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464.
Package: java-1.5.0-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.6.0-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.7.0-ibm (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.7.0-oracle (Red Hat Enterprise Linux 5) - Not affected
Package: java-1.5.0-ibm (Red Hat Enterprise Linux 6) - Not affected
Package: java-1.6.0-ibm (Red Hat Enterprise Linux 6) - Not affected
Package: java-1.7.0-ibm (Red Hat Enterprise Linux 6) - Not affected
Package: java-1.7.0-oracle (Red Hat Enterprise Linux 6) - Not
VulDB
Oracle Java SE 8 Scripting information disclosure (Nessus ID 73570 / ID 122007)
vuldb·2026-05-11·CVSS 4.3
CVE-2014-0463 [MEDIUM] Oracle Java SE 8 Scripting information disclosure (Nessus ID 73570 / ID 122007)
A vulnerability has been found in Oracle Java SE 8 and classified as problematic. The affected element is an unknown function of the component Scripting Handler. The manipulation leads to information disclosure.
This vulnerability is listed as CVE-2014-0463. The attack may be initiated remotely. There is no available exploit.
The affected component should be upgraded.
GHSA
GHSA-p8q4-x73g-2m7x: Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different
ghsa_unreviewed·2022-05-10·CVSS 4.3
CVE-2014-0464 [MEDIUM] GHSA-p8q4-x73g-2m7x: Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0463.
GHSA
GHSA-phcj-rpjg-7h8v: Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different
ghsa_unreviewed·2022-05-10·CVSS 4.3
CVE-2014-0463 [MEDIUM] GHSA-phcj-rpjg-7h8v: Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464.
No detection rules found.
No public exploits indexed.
http://security.gentoo.org/glsa/glsa-201502-12.xmlhttp://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlhttp://www.securityfocus.com/bid/66908http://security.gentoo.org/glsa/glsa-201502-12.xmlhttp://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.htmlhttp://www.securityfocus.com/bid/66908
2014-04-16
Published