Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
References
| Link | Resource |
|---|---|
| https://security.gentoo.org/glsa/202006-22 | Third Party Advisory |
| https://security.gentoo.org/glsa/202209-15 | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20200122-0003/ | Third Party Advisory |
| https://www.oracle.com/security-alerts/cpujan2020.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
27 Oct 2022, 23:03
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Netapp steelstore Cloud Integrated Storage
Netapp plug-in For Symantec Netbackup Netapp santricity Unified Manager Netapp cloud Backup Netapp e-series Santricity Management Plug-ins Netapp oncommand Workflow Automation Netapp oncommand Insight Netapp active Iq Unified Manager Netapp e-series Santricity Os Controller Netapp e-series Performance Analyzer Netapp Netapp e-series Santricity Storage Manager Netapp e-series Santricity Web Services |
|
| CPE | cpe:2.3:a:netapp:e-series_santricity_storage_manager:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:jre:1.8.0:update231:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:netapp:e-series_santricity_management_plug-ins:-:*:*:*:*:vmware_vcenter:*:* cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:* cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:* cpe:2.3:a:netapp:santricity_unified_manager:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:* |
|
| References | (GENTOO) https://security.gentoo.org/glsa/202006-22 - Third Party Advisory | |
| References | (GENTOO) https://security.gentoo.org/glsa/202209-15 - Third Party Advisory |
25 Sep 2022, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2020-01-15 17:15
Updated : 2023-12-10 13:13
NVD link : CVE-2020-2585
Mitre link : CVE-2020-2585
CVE.ORG link : CVE-2020-2585
JSON object : View
Products Affected
netapp
- oncommand_workflow_automation
- e-series_santricity_storage_manager
- active_iq_unified_manager
- plug-in_for_symantec_netbackup
- e-series_santricity_management_plug-ins
- cloud_backup
- e-series_santricity_os_controller
- e-series_performance_analyzer
- santricity_unified_manager
- oncommand_insight
- e-series_santricity_web_services
- steelstore_cloud_integrated_storage
oracle
- jdk
- jre
CWE