5.8

CVE-2020-14792

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Openjdk Version 7 Update -
Oracle ≫ Openjdk Version 7 Update update1
Oracle ≫ Openjdk Version 7 Update update10
Oracle ≫ Openjdk Version 7 Update update101
Oracle ≫ Openjdk Version 7 Update update11
Oracle ≫ Openjdk Version 7 Update update111
Oracle ≫ Openjdk Version 7 Update update121
Oracle ≫ Openjdk Version 7 Update update13
Oracle ≫ Openjdk Version 7 Update update131
Oracle ≫ Openjdk Version 7 Update update141
Oracle ≫ Openjdk Version 7 Update update15
Oracle ≫ Openjdk Version 7 Update update151
Oracle ≫ Openjdk Version 7 Update update161
Oracle ≫ Openjdk Version 7 Update update17
Oracle ≫ Openjdk Version 7 Update update171
Oracle ≫ Openjdk Version 7 Update update181
Oracle ≫ Openjdk Version 7 Update update191
Oracle ≫ Openjdk Version 7 Update update2
Oracle ≫ Openjdk Version 7 Update update201
Oracle ≫ Openjdk Version 7 Update update21
Oracle ≫ Openjdk Version 7 Update update211
Oracle ≫ Openjdk Version 7 Update update221
Oracle ≫ Openjdk Version 7 Update update231
Oracle ≫ Openjdk Version 7 Update update241
Oracle ≫ Openjdk Version 7 Update update25
Oracle ≫ Openjdk Version 7 Update update251
Oracle ≫ Openjdk Version 7 Update update261
Oracle ≫ Openjdk Version 7 Update update271
Oracle ≫ Openjdk Version 8 Update -
Oracle ≫ Openjdk Version 8 Update milestone1
Oracle ≫ Openjdk Version 8 Update milestone2
Oracle ≫ Openjdk Version 8 Update milestone3
Oracle ≫ Openjdk Version 8 Update milestone4
Oracle ≫ Openjdk Version 8 Update milestone5
Oracle ≫ Openjdk Version 8 Update milestone6
Oracle ≫ Openjdk Version 8 Update milestone7
Oracle ≫ Openjdk Version 8 Update milestone8
Oracle ≫ Openjdk Version 8 Update milestone9
Oracle ≫ Openjdk Version 8 Update update101
Oracle ≫ Openjdk Version 8 Update update102
Oracle ≫ Openjdk Version 8 Update update11
Oracle ≫ Openjdk Version 8 Update update111
Oracle ≫ Openjdk Version 8 Update update112
Oracle ≫ Openjdk Version 8 Update update121
Oracle ≫ Openjdk Version 8 Update update131
Oracle ≫ Openjdk Version 8 Update update141
Oracle ≫ Openjdk Version 8 Update update151
Oracle ≫ Openjdk Version 8 Update update152
Oracle ≫ Openjdk Version 8 Update update161
Oracle ≫ Openjdk Version 8 Update update162
Oracle ≫ Openjdk Version 8 Update update171
Oracle ≫ Openjdk Version 8 Update update172
Oracle ≫ Openjdk Version 8 Update update181
Oracle ≫ Openjdk Version 8 Update update191
Oracle ≫ Openjdk Version 8 Update update192
Oracle ≫ Openjdk Version 8 Update update20
Oracle ≫ Openjdk Version 8 Update update201
Oracle ≫ Openjdk Version 8 Update update202
Oracle ≫ Openjdk Version 8 Update update211
Oracle ≫ Openjdk Version 8 Update update212
Oracle ≫ Openjdk Version 8 Update update221
Oracle ≫ Openjdk Version 8 Update update222
Oracle ≫ Openjdk Version 8 Update update231
Oracle ≫ Openjdk Version 8 Update update232
Oracle ≫ Openjdk Version 8 Update update241
Oracle ≫ Openjdk Version 8 Update update242
Oracle ≫ Openjdk Version 8 Update update25
Oracle ≫ Openjdk Version 8 Update update252
Oracle ≫ Openjdk Version 8 Update update262
Oracle ≫ Openjdk Version 11
Oracle ≫ Openjdk Version 11.0.1
Oracle ≫ Openjdk Version 11.0.2
Oracle ≫ Openjdk Version 11.0.3
Oracle ≫ Openjdk Version 11.0.4
Oracle ≫ Openjdk Version 11.0.5
Oracle ≫ Openjdk Version 11.0.6
Oracle ≫ Openjdk Version 11.0.7
Oracle ≫ Openjdk Version 11.0.8
Oracle ≫ Openjdk Version 13
Oracle ≫ Openjdk Version 13.0.1
Oracle ≫ Openjdk Version 13.0.2
Oracle ≫ Openjdk Version 13.0.3
Oracle ≫ Openjdk Version 13.0.4
Oracle ≫ Openjdk Version 15
Oracle ≫ Jdk Version 1.7.0 Update update271
Oracle ≫ Jdk Version 1.8.0 Update update261
Oracle ≫ Jdk Version 11.0.8
Oracle ≫ Jdk Version 15
Oracle ≫ Jre Version 1.7.0 Update update271
Oracle ≫ Jre Version 1.8.0 Update update261
Oracle ≫ Jre Version 11.0.8
Oracle ≫ Jre Version 15
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Netapp ≫ Active Iq Unified Manager SwPlatform windows Version >= 7.3
Netapp ≫ Active Iq Unified Manager SwPlatform vmware_vsphere Version >= 9.5
Netapp ≫ E-series Santricity Os Controller Version >= 11.0.0 <= 11.60.1
Netapp ≫ Hci Management Node Version -
Netapp ≫ Oncommand Insight Version -
Netapp ≫ Snapmanager Version - Update - SwPlatform oracle
Netapp ≫ Snapmanager Version - Update - SwPlatform sap
Netapp ≫ Solidfire Version -
Netapp ≫ Hci Storage Node Version -
Mcafee ≫ Epolicy Orchestrator Version 5.9.0
Mcafee ≫ Epolicy Orchestrator Version 5.9.1
Mcafee ≫ Epolicy Orchestrator Version 5.10.0 Update -
Mcafee ≫ Epolicy Orchestrator Version 5.10.0 Update update_1
Mcafee ≫ Epolicy Orchestrator Version 5.10.0 Update update_2
Mcafee ≫ Epolicy Orchestrator Version 5.10.0 Update update_3
Mcafee ≫ Epolicy Orchestrator Version 5.10.0 Update update_4
Mcafee ≫ Epolicy Orchestrator Version 5.10.0 Update update_5
Mcafee ≫ Epolicy Orchestrator Version 5.10.0 Update update_6
Opensuse ≫ Leap Version 15.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.23% 0.808
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
Oracle 4.2 1.6 2.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.oracle.com/security-alerts/cpuoct2020.html
Vendor Advisory
https://security.gentoo.org/glsa/202101-19
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html
Third Party Advisory
Mailing List
https://lists.debian.org/debian-lts-announce/2020/10/msg00031.html
Third Party Advisory
Mailing List
https://security.netapp.com/advisory/ntap-20201023-0004/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4779
Third Party Advisory