AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2014-8642

MEDIUM · CVSS 4.3 EPSS 1.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-01-14 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2014-8642
Severity
MEDIUM
CVSS
4.3
EPSS
1.57%
Firefox

Original Filing — NVD Description

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCSP responder, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which there was an incorrect decision to accept a compromised and revoked certificate.