Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20200416-0004/ | Third Party Advisory |
https://usn.ubuntu.com/4337-1/ | Third Party Advisory |
https://www.debian.org/security/2020/dsa-4662 | Third Party Advisory |
https://www.oracle.com/security-alerts/cpuapr2020.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
History
30 Jun 2022, 20:02
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:* cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:santricity_unified_manager:-:*:*:*:*:*:*:* cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* |
|
First Time |
Netapp santricity Unified Manager
Netapp plug-in For Symantec Netbackup Netapp cloud Backup Netapp steelstore Cloud Integrated Storage Opensuse leap Debian Opensuse Canonical Canonical ubuntu Linux Debian debian Linux Netapp e-series Performance Analyzer Netapp oncommand Workflow Automation Netapp oncommand Insight Netapp e-series Santricity Web Services Netapp 7-mode Transition Tool |
|
References | (DEBIAN) https://www.debian.org/security/2020/dsa-4662 - Third Party Advisory | |
References | (UBUNTU) https://usn.ubuntu.com/4337-1/ - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html - Third Party Advisory |
Information
Published : 2020-04-15 14:15
Updated : 2023-12-10 13:27
NVD link : CVE-2020-2816
Mitre link : CVE-2020-2816
CVE.ORG link : CVE-2020-2816
JSON object : View
Products Affected
debian
- debian_linux
netapp
- active_iq_unified_manager
- cloud_backup
- santricity_unified_manager
- steelstore_cloud_integrated_storage
- oncommand_workflow_automation
- 7-mode_transition_tool
- plug-in_for_symantec_netbackup
- e-series_performance_analyzer
- e-series_santricity_web_services
- oncommand_insight
- e-series_santricity_os_controller
- snapmanager
- storagegrid
oracle
- openjdk
- jdk
- jre
opensuse
- leap
canonical
- ubuntu_linux
CWE