Lucene search

[email protected]CVE-2020-14578

HistoryJul 15, 2020 - 6:15 p.m.

CVE-2020-14578

2020-07-1518:15:23

[email protected]

web.nvd.nist.gov

259

cve-2020-14578

vulnerability

java se

oracle

libraries

dos

exploit

network access

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

4.3 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.8%

JSON

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected configurations

NVD

Node

oraclejdkMatch1.7.0update261

oraclejdkMatch1.8.0update251

oraclejreMatch1.8.0update251

Node

fedoraprojectfedoraMatch31

fedoraprojectfedoraMatch32

Node

opensuseleapMatch15.2

Node

debiandebian_linuxMatch9.0

debiandebian_linuxMatch10.0

Node

canonicalubuntu_linuxMatch16.04esm

canonicalubuntu_linuxMatch18.04lts

canonicalubuntu_linuxMatch20.04lts

Node

mcafeeepolicy_orchestratorMatch5.9.0

mcafeeepolicy_orchestratorMatch5.9.1

mcafeeepolicy_orchestratorMatch5.10.0-

mcafeeepolicy_orchestratorMatch5.10.0update_1

mcafeeepolicy_orchestratorMatch5.10.0update_2

mcafeeepolicy_orchestratorMatch5.10.0update_3

mcafeeepolicy_orchestratorMatch5.10.0update_4

mcafeeepolicy_orchestratorMatch5.10.0update_5

mcafeeepolicy_orchestratorMatch5.10.0update_6

mcafeeepolicy_orchestratorMatch5.10.0update_7

mcafeeepolicy_orchestratorMatch5.10.0update_8

Node

netapp7-mode_transition_toolMatch-

netappactive_iq_unified_managerRange7.3≥windows

netappactive_iq_unified_managerRange9.5≥vsphere

netappcloud_backupMatch-

netappcloud_secure_agentMatch-

netappe-series_performance_analyzerMatch-

netappe-series_santricity_os_controllerRange11.0.0–11.70.2

netappe-series_santricity_web_servicesMatch-web_services_proxy

netapponcommand_insightMatch-

netapponcommand_workflow_automationMatch-

netappsantricity_unified_managerMatch-

netappsnapmanagerMatch-sap

netappsnapmanagerMatch--oracle

netappsteelstore_cloud_integrated_storageMatch-

netappstoragegridRange9.0.0–9.0.4

netappstoragegridMatch-

CPENameOperatorVersion
oracle:jdkoracle jdkeq1.7.0
oracle:jdkoracle jdkeq1.8.0
oracle:jreoracle jreeq1.8.0

CPE	Name	Operator	Version
oracle:jdk	oracle jdk	eq	1.7.0
oracle:jdk	oracle jdk	eq	1.8.0
oracle:jre	oracle jre	eq	1.8.0

CNA Affected

[
  {
    "product": "Java",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Java SE: 7u261, 8u251"
      },
      {
        "status": "affected",
        "version": "Java SE Embedded: 8u251"
      }
    ]
  }
]