CVE-2020-14577

Published: Jul 15, 2020Modified: May 27, 2025

3.7

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.2 / Impact: 1.4

Source: NVD (Secondary)

Description

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected (113)

Products: Oracle: Openjdk, Jdk, Jre · Fedoraproject: Fedora · Canonical: Ubuntu Linux · +3 more

Show all products

3 products

1 product

1 product

1 product

1 product

13 products

7 Mode Transition Tool

Active Iq Unified Manager

Cloud Backup

Cloud Secure Agent

E Series Performance Analyzer

E Series Santricity Os Controller

E Series Santricity Web Services

Oncommand Insight

Oncommand Workflow Automation

Santricity Unified Manager

Snapmanager

Steelstore Cloud Integrated Storage

Storagegrid

Configuration A

80 vulnerable

Vulnerable Software	Affected Versions
Oracle Openjdk	Version 11.0.1
Oracle Openjdk	Version 11.0.2
Oracle Openjdk	Version 11.0.3
Oracle Openjdk	Version 11.0.4
Oracle Openjdk	Version 11.0.5
Oracle Openjdk	Version 11.0.6
Oracle Openjdk	Version 11.0.7
Oracle Openjdk	Version 11
Oracle Openjdk	Version 13.0.1
Oracle Openjdk	Version 13.0.2
Oracle Openjdk	Version 13.0.3
Oracle Openjdk	Version 13
Oracle Openjdk	Version 14
Oracle Openjdk	Version 7
Oracle Openjdk	Version 7 update101
Oracle Openjdk	Version 7 update10
Oracle Openjdk	Version 7 update111
Oracle Openjdk	Version 7 update11
Oracle Openjdk	Version 7 update121
Oracle Openjdk	Version 7 update131
Oracle Openjdk	Version 7 update13
Oracle Openjdk	Version 7 update141
Oracle Openjdk	Version 7 update151
Oracle Openjdk	Version 7 update15
Oracle Openjdk	Version 7 update161
Oracle Openjdk	Version 7 update171
Oracle Openjdk	Version 7 update17
Oracle Openjdk	Version 7 update181
Oracle Openjdk	Version 7 update191
Oracle Openjdk	Version 7 update1
Oracle Openjdk	Version 7 update201
Oracle Openjdk	Version 7 update211
Oracle Openjdk	Version 7 update21
Oracle Openjdk	Version 7 update221
Oracle Openjdk	Version 7 update231
Oracle Openjdk	Version 7 update241
Oracle Openjdk	Version 7 update251
Oracle Openjdk	Version 7 update25
Oracle Openjdk	Version 7 update261
Oracle Openjdk	Version 7 update2
Oracle Openjdk	Version 8
Oracle Openjdk	Version 8 milestone1
Oracle Openjdk	Version 8 milestone2
Oracle Openjdk	Version 8 milestone3
Oracle Openjdk	Version 8 milestone4
Oracle Openjdk	Version 8 milestone5
Oracle Openjdk	Version 8 milestone6
Oracle Openjdk	Version 8 milestone7
Oracle Openjdk	Version 8 milestone8
Oracle Openjdk	Version 8 milestone9
Oracle Openjdk	Version 8 update101
Oracle Openjdk	Version 8 update102
Oracle Openjdk	Version 8 update111
Oracle Openjdk	Version 8 update112
Oracle Openjdk	Version 8 update11
Oracle Openjdk	Version 8 update121
Oracle Openjdk	Version 8 update131
Oracle Openjdk	Version 8 update141
Oracle Openjdk	Version 8 update151
Oracle Openjdk	Version 8 update152
Oracle Openjdk	Version 8 update161
Oracle Openjdk	Version 8 update162
Oracle Openjdk	Version 8 update171
Oracle Openjdk	Version 8 update172
Oracle Openjdk	Version 8 update181
Oracle Openjdk	Version 8 update191
Oracle Openjdk	Version 8 update192
Oracle Openjdk	Version 8 update201
Oracle Openjdk	Version 8 update202
Oracle Openjdk	Version 8 update20
Oracle Openjdk	Version 8 update211
Oracle Openjdk	Version 8 update212
Oracle Openjdk	Version 8 update221
Oracle Openjdk	Version 8 update222
Oracle Openjdk	Version 8 update231
Oracle Openjdk	Version 8 update232
Oracle Openjdk	Version 8 update241
Oracle Openjdk	Version 8 update242
Oracle Openjdk	Version 8 update252
Oracle Openjdk	Version 8 update25

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.7.0 update261
Oracle Jdk	Version 1.8.0 update251
Oracle Jdk	Version 11.0.7
Oracle Jdk	Version 14.0.1
Oracle Jre	Version 1.7.0 update261
Oracle Jre	Version 1.8.0 update251
Oracle Jre	Version 11.0.7
Oracle Jre	Version 14.0.1

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 31
Fedoraproject Fedora	Version 32

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 20.04

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.1
Opensuse Leap	Version 15.2

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 9.0

Configuration G

16 vulnerable

Vulnerable Software	Affected Versions
Netapp 7 Mode Transition Tool	All versions
Netapp Active Iq Unified Manager	From 9.5
Netapp Active Iq Unified Manager	From 7.3
Netapp Cloud Backup	All versions
Netapp Cloud Secure Agent	All versions
Netapp E Series Performance Analyzer	All versions
Netapp E Series Santricity Os Controller	From 11.0.0 to 11.70.2
Netapp E Series Santricity Web Services	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Workflow Automation	All versions
Netapp Santricity Unified Manager	All versions
Netapp Snapmanager	All versions
Netapp Snapmanager	All versions
Netapp Steelstore Cloud Integrated Storage	All versions
Netapp Storagegrid	From 9.0.0 to 9.0.4
Netapp Storagegrid	All versions