CVE-2020-14556

EPSS 0.58%
Published 15.07.2020 18:15:20
Last modified 27.05.2025 16:35:16
Source secalert_us@oracle.com
Teams watchlist Login
Open Login

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).

Affected products Warnungen 0 Metrics 4 CWE 0 References 18

Data is provided by the National Vulnerability Database (NVD)

Oracle ≫ Openjdk Version8 Update-

Oracle ≫ Openjdk Version8 Updatemilestone1

Oracle ≫ Openjdk Version8 Updatemilestone2

Oracle ≫ Openjdk Version8 Updatemilestone3

Oracle ≫ Openjdk Version8 Updatemilestone4

Oracle ≫ Openjdk Version8 Updatemilestone5

Oracle ≫ Openjdk Version8 Updatemilestone6

Oracle ≫ Openjdk Version8 Updatemilestone7

Oracle ≫ Openjdk Version8 Updatemilestone8

Oracle ≫ Openjdk Version8 Updatemilestone9

Oracle ≫ Openjdk Version8 Updateupdate101

Oracle ≫ Openjdk Version8 Updateupdate102

Oracle ≫ Openjdk Version8 Updateupdate11

Oracle ≫ Openjdk Version8 Updateupdate111

Oracle ≫ Openjdk Version8 Updateupdate112

Oracle ≫ Openjdk Version8 Updateupdate121

Oracle ≫ Openjdk Version8 Updateupdate131

Oracle ≫ Openjdk Version8 Updateupdate141

Oracle ≫ Openjdk Version8 Updateupdate151

Oracle ≫ Openjdk Version8 Updateupdate152

Oracle ≫ Openjdk Version8 Updateupdate161

Oracle ≫ Openjdk Version8 Updateupdate162

Oracle ≫ Openjdk Version8 Updateupdate171

Oracle ≫ Openjdk Version8 Updateupdate172

Oracle ≫ Openjdk Version8 Updateupdate181

Oracle ≫ Openjdk Version8 Updateupdate191

Oracle ≫ Openjdk Version8 Updateupdate192

Oracle ≫ Openjdk Version8 Updateupdate20

Oracle ≫ Openjdk Version8 Updateupdate201

Oracle ≫ Openjdk Version8 Updateupdate202

Oracle ≫ Openjdk Version8 Updateupdate211

Oracle ≫ Openjdk Version8 Updateupdate212

Oracle ≫ Openjdk Version8 Updateupdate221

Oracle ≫ Openjdk Version8 Updateupdate222

Oracle ≫ Openjdk Version8 Updateupdate231

Oracle ≫ Openjdk Version8 Updateupdate232

Oracle ≫ Openjdk Version8 Updateupdate241

Oracle ≫ Openjdk Version8 Updateupdate242

Oracle ≫ Openjdk Version8 Updateupdate25

Oracle ≫ Openjdk Version8 Updateupdate252

Oracle ≫ Openjdk Version11

Oracle ≫ Openjdk Version11.0.1

Oracle ≫ Openjdk Version11.0.2

Oracle ≫ Openjdk Version11.0.3

Oracle ≫ Openjdk Version11.0.4

Oracle ≫ Openjdk Version11.0.5

Oracle ≫ Openjdk Version11.0.6

Oracle ≫ Openjdk Version11.0.7

Oracle ≫ Openjdk Version13

Oracle ≫ Openjdk Version13.0.1

Oracle ≫ Openjdk Version13.0.2

Oracle ≫ Openjdk Version13.0.3

Oracle ≫ Openjdk Version14

Oracle ≫ Jdk Version1.8.0 Updateupdate251

Oracle ≫ Jdk Version11.0.7

Oracle ≫ Jdk Version14.0.1

Oracle ≫ Jre Version1.8.0 Updateupdate251

Oracle ≫ Jre Version11.0.7

Oracle ≫ Jre Version14.0.1

Fedoraproject ≫ Fedora Version31

Fedoraproject ≫ Fedora Version32

Opensuse ≫ Leap Version15.1

Opensuse ≫ Leap Version15.2

Debian ≫ Debian Linux Version9.0

Debian ≫ Debian Linux Version10.0

Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm

Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts

Canonical ≫ Ubuntu Linux Version20.04 SwEditionlts

Netapp ≫ 7-mode Transition Tool Version-

Netapp ≫ Active Iq Unified Manager SwPlatformwindows Version >= 7.3

Netapp ≫ Active Iq Unified Manager SwPlatformvsphere Version >= 9.5

Netapp ≫ Cloud Backup Version-

Netapp ≫ Cloud Secure Agent Version-

Netapp ≫ E-series Performance Analyzer Version-

Netapp ≫ E-series Santricity Os Controller Version >= 11.0.0 <= 11.70.2

Netapp ≫ E-series Santricity Web Services Version- SwPlatformweb_services_proxy

Netapp ≫ Oncommand Insight Version-

Netapp ≫ Oncommand Workflow Automation Version-

Netapp ≫ Santricity Unified Manager Version-

Netapp ≫ Snapmanager Version- SwPlatformsap

Netapp ≫ Snapmanager Version- Update- SwPlatformoracle

Netapp ≫ Steelstore Cloud Integrated Storage Version-

Netapp ≫ Storagegrid Version >= 9.0.0 <= 9.0.4

Netapp ≫ Storagegrid Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.58%	0.68

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N
nvd@nist.gov	4.8	2.2	2.5	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
secalert_us@oracle.com	4.8	2.2	2.5	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N