5.3

CVE-2020-2781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Jdk Version 1.7.0 Update update251
Oracle ≫ Jdk Version 1.8.0 Update update241
Oracle ≫ Jdk Version 11.0.6
Oracle ≫ Jdk Version 14.0.0
Oracle ≫ Jre Version 1.7.0 Update update251
Oracle ≫ Jre Version 1.8.0 Update update241
Oracle ≫ Jre Version 11.0.6
Oracle ≫ Jre Version 14.0.0
Oracle ≫ Openjdk Version >= 11 <= 11.0.6
Oracle ≫ Openjdk Version >= 13 <= 13.0.2
Oracle ≫ Openjdk Version 7 Update -
Oracle ≫ Openjdk Version 7 Update update1
Oracle ≫ Openjdk Version 7 Update update10
Oracle ≫ Openjdk Version 7 Update update101
Oracle ≫ Openjdk Version 7 Update update11
Oracle ≫ Openjdk Version 7 Update update111
Oracle ≫ Openjdk Version 7 Update update121
Oracle ≫ Openjdk Version 7 Update update13
Oracle ≫ Openjdk Version 7 Update update131
Oracle ≫ Openjdk Version 7 Update update141
Oracle ≫ Openjdk Version 7 Update update15
Oracle ≫ Openjdk Version 7 Update update151
Oracle ≫ Openjdk Version 7 Update update161
Oracle ≫ Openjdk Version 7 Update update17
Oracle ≫ Openjdk Version 7 Update update171
Oracle ≫ Openjdk Version 7 Update update181
Oracle ≫ Openjdk Version 7 Update update191
Oracle ≫ Openjdk Version 7 Update update2
Oracle ≫ Openjdk Version 7 Update update201
Oracle ≫ Openjdk Version 7 Update update21
Oracle ≫ Openjdk Version 7 Update update211
Oracle ≫ Openjdk Version 7 Update update221
Oracle ≫ Openjdk Version 7 Update update231
Oracle ≫ Openjdk Version 7 Update update241
Oracle ≫ Openjdk Version 7 Update update25
Oracle ≫ Openjdk Version 7 Update update251
Oracle ≫ Openjdk Version 7 Update update3
Oracle ≫ Openjdk Version 7 Update update4
Oracle ≫ Openjdk Version 7 Update update40
Oracle ≫ Openjdk Version 7 Update update45
Oracle ≫ Openjdk Version 7 Update update5
Oracle ≫ Openjdk Version 7 Update update51
Oracle ≫ Openjdk Version 7 Update update55
Oracle ≫ Openjdk Version 7 Update update6
Oracle ≫ Openjdk Version 7 Update update60
Oracle ≫ Openjdk Version 7 Update update65
Oracle ≫ Openjdk Version 7 Update update67
Oracle ≫ Openjdk Version 7 Update update7
Oracle ≫ Openjdk Version 7 Update update72
Oracle ≫ Openjdk Version 7 Update update76
Oracle ≫ Openjdk Version 7 Update update80
Oracle ≫ Openjdk Version 7 Update update85
Oracle ≫ Openjdk Version 7 Update update9
Oracle ≫ Openjdk Version 7 Update update91
Oracle ≫ Openjdk Version 7 Update update95
Oracle ≫ Openjdk Version 7 Update update97
Oracle ≫ Openjdk Version 7 Update update99
Oracle ≫ Openjdk Version 8 Update -
Oracle ≫ Openjdk Version 8 Update update101
Oracle ≫ Openjdk Version 8 Update update102
Oracle ≫ Openjdk Version 8 Update update11
Oracle ≫ Openjdk Version 8 Update update111
Oracle ≫ Openjdk Version 8 Update update112
Oracle ≫ Openjdk Version 8 Update update121
Oracle ≫ Openjdk Version 8 Update update131
Oracle ≫ Openjdk Version 8 Update update141
Oracle ≫ Openjdk Version 8 Update update151
Oracle ≫ Openjdk Version 8 Update update152
Oracle ≫ Openjdk Version 8 Update update161
Oracle ≫ Openjdk Version 8 Update update162
Oracle ≫ Openjdk Version 8 Update update171
Oracle ≫ Openjdk Version 8 Update update172
Oracle ≫ Openjdk Version 8 Update update181
Oracle ≫ Openjdk Version 8 Update update191
Oracle ≫ Openjdk Version 8 Update update192
Oracle ≫ Openjdk Version 8 Update update20
Oracle ≫ Openjdk Version 8 Update update201
Oracle ≫ Openjdk Version 8 Update update202
Oracle ≫ Openjdk Version 8 Update update211
Oracle ≫ Openjdk Version 8 Update update212
Oracle ≫ Openjdk Version 8 Update update221
Oracle ≫ Openjdk Version 8 Update update231
Oracle ≫ Openjdk Version 8 Update update241
Oracle ≫ Openjdk Version 8 Update update25
Oracle ≫ Openjdk Version 8 Update update31
Oracle ≫ Openjdk Version 8 Update update40
Oracle ≫ Openjdk Version 8 Update update45
Oracle ≫ Openjdk Version 8 Update update5
Oracle ≫ Openjdk Version 8 Update update51
Oracle ≫ Openjdk Version 8 Update update60
Oracle ≫ Openjdk Version 8 Update update65
Oracle ≫ Openjdk Version 8 Update update66
Oracle ≫ Openjdk Version 8 Update update71
Oracle ≫ Openjdk Version 8 Update update72
Oracle ≫ Openjdk Version 8 Update update73
Oracle ≫ Openjdk Version 8 Update update74
Oracle ≫ Openjdk Version 8 Update update77
Oracle ≫ Openjdk Version 8 Update update91
Oracle ≫ Openjdk Version 8 Update update92
Oracle ≫ Openjdk Version 14
Debian ≫ Debian Linux Version 8.0
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition esm
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 19.10
Opensuse ≫ Leap Version 15.1
Opensuse ≫ Leap Version 15.2
Fedoraproject ≫ Fedora Version 30
Fedoraproject ≫ Fedora Version 31
Fedoraproject ≫ Fedora Version 32
Mcafee ≫ Threat Intelligence Exchange Server Version 2.1.0 Update -
Mcafee ≫ Threat Intelligence Exchange Server Version 2.1.0 Update hotfix1
Mcafee ≫ Threat Intelligence Exchange Server Version 2.1.0 Update hotfix2
Mcafee ≫ Threat Intelligence Exchange Server Version 2.1.0 Update hotfix3
Mcafee ≫ Threat Intelligence Exchange Server Version 2.1.1 Update -
Mcafee ≫ Threat Intelligence Exchange Server Version 2.1.1 Update hotfix1
Mcafee ≫ Threat Intelligence Exchange Server Version 2.1.1 Update hotfix2
Mcafee ≫ Threat Intelligence Exchange Server Version 2.1.1 Update hotfix3
Mcafee ≫ Threat Intelligence Exchange Server Version 2.2.0 Update -
Mcafee ≫ Threat Intelligence Exchange Server Version 2.2.0 Update hotfix1
Mcafee ≫ Threat Intelligence Exchange Server Version 2.3.0 Update -
Mcafee ≫ Threat Intelligence Exchange Server Version 2.3.0 Update hotfix1
Mcafee ≫ Threat Intelligence Exchange Server Version 2.3.1 Update -
Mcafee ≫ Threat Intelligence Exchange Server Version 2.3.1 Update hotfix1
Mcafee ≫ Threat Intelligence Exchange Server Version 2.3.1 Update hotfix2
Netapp ≫ Active Iq Unified Manager SwPlatform windows Version >= 7.3
Netapp ≫ Active Iq Unified Manager SwPlatform vsphere Version >= 9.5
Netapp ≫ Cloud Backup Version -
Netapp ≫ Cloud Secure Agent Version -
Netapp ≫ E-series Santricity Os Controller Version >= 11.0.0 <= 11.70.2
Netapp ≫ E-series Santricity Web Services Version - SwPlatform web_services_proxy
Netapp ≫ Oncommand Insight Version -
Netapp ≫ Snapmanager Version - SwPlatform sap
Netapp ≫ Snapmanager Version - Update - SwPlatform oracle
Netapp ≫ Storagegrid Version >= 9.0.0 <= 9.0.4
Netapp ≫ Storagegrid Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.95% 0.91
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Oracle 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.oracle.com/security-alerts/cpuapr2020.html
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10318
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200416-0004/
Third Party Advisory
https://security.gentoo.org/glsa/202006-22
Third Party Advisory
https://security.gentoo.org/glsa/202209-15
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html
Third Party Advisory
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/
https://usn.ubuntu.com/4337-1/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4662
Third Party Advisory
https://www.debian.org/security/2020/dsa-4668
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html
Third Party Advisory
Mailing List