Is CVE-2014-3566 being actively exploited?

CVE-2014-3566 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2014-3566?

CVE-2014-3566 has a CVSS 3.1 base score of 3.4 (LOW).

CVE-2014-3566

LOW · CVSS 3.4EPSS 100.0%EU EUVD

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

Key facts

CVSS score: 3.4 (v3.1)
Severity: LOW
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Weakness (CWE): CWE-310
EPSS score: 100.0% (100th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2014-3547)
Published: October 15, 2014
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-3547 in the EU Vulnerability Database. Last updated in EUVD on May 28, 2026.

View on the EU Vulnerability Database

Affected products

apple / mac os x
debian / debian linux
debian / debian linux
fedoraproject / fedora
fedoraproject / fedora
fedoraproject / fedora
ibm / aix
ibm / aix
ibm / aix
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
ibm / vios
mageia / mageia
mageia / mageia
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd
netbsd / netbsd

and 97 more…

Certified products that may be affected

8 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical
Red Hat Enterprise Linux 5 OpenSSH Client Cryptographic Module - Red Hat®, Inc. - FIPS 140 1385 - historical
Red Hat Enterprise Linux 5 OpenSwan Cryptographic Module - Red Hat®, Inc. - FIPS 140 1386 - historical
Red Hat Enterprise Linux 5 Kernel Crypto API Cryptographic Module - Red Hat®, Inc. - FIPS 140 1387 - historical
Red Hat Enterprise Linux 5 OpenSSL Cryptographic Module - Red Hat®, Inc. - FIPS 140 1320 - historical

See all 8 in the Security Certifications Explorer.

References

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2014-015.txt.asc(Third Party Advisory)
http://advisories.mageia.org/MGASA-2014-0416.html(Third Party Advisory)
http://aix.software.ibm.com/aix/efixes/security/openssl_advisory11.asc(Third Party Advisory)
http://archives.neohapsis.com/archives/bugtraq/2014-10/0101.html(Third Party Advisory)
http://archives.neohapsis.com/archives/bugtraq/2014-10/0103.html(Third Party Advisory)
http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566(Third Party Advisory)
http://blog.cryptographyengineering.com/2014/10/attack-of-week-poodle.html(Third Party Advisory)
http://blog.nodejs.org/2014/10/23/node-v0-10-33-stable/(Third Party Advisory)
http://blogs.technet.com/b/msrc/archive/2014/10/14/security-advisory-3009008-released.aspx(Third Party Advisory)
http://docs.ipswitch.com/MOVEit/DMZ82/ReleaseNotes/MOVEitReleaseNotes82.pdf(Third Party Advisory)
http://downloads.asterisk.org/pub/security/AST-2014-011.html(Third Party Advisory)
http://googleonlinesecurity.blogspot.com/2014/10/this-poodle-bites-exploiting-ssl-30.html(Third Party Advisory)
http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581(Third Party Advisory)
http://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04779034(Third Party Advisory)
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705(Third Party Advisory)
http://lists.apple.com/archives/security-announce/2015/Jan/msg00003.html(Mailing List, Third Party Advisory)
http://lists.apple.com/archives/security-announce/2015/Sep/msg00002.html(Mailing List, Third Party Advisory)
http://lists.fedoraproject.org/pipermail/package-announce/2014-November/142330.html(Third Party Advisory)
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141114.html(Third Party Advisory)
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/141158.html(Third Party Advisory)
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169361.html(Third Party Advisory)
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169374.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00008.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00001.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00003.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00002.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00001.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00027.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00018.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00027.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00066.html(Third Party Advisory)
http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00000.html(Third Party Advisory)
http://marc.info/?l=bugtraq&m=141450452204552&w=2(Third Party Advisory)
http://marc.info/?l=bugtraq&m=141450973807288&w=2(Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain