CVE-2020-14621

Published: Jul 15, 2020Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD (Secondary)

Description

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).

Affected (125)

Products: Oracle: Openjdk, Jdk, Jre · Fedoraproject: Fedora · Mcafee: Epolicy Orchestrator · +4 more

Show all products

3 products

1 product

1 product

1 product

1 product

1 product

15 products

7 Mode Transition Tool

Active Iq Unified Manager

Cloud Backup

Cloud Secure Agent

E Series Performance Analyzer

E Series Santricity Os Controller

E Series Santricity Storage Manager

E Series Santricity Web Services

Oncommand Insight

Oncommand Unified Manager Core Package

Oncommand Workflow Automation

Plug In For Symantec Netbackup

Santricity Unified Manager

Snapmanager

Steelstore Cloud Integrated Storage

Configuration A

80 vulnerable

Vulnerable Software	Affected Versions
Oracle Openjdk	Version 11.0.1
Oracle Openjdk	Version 11.0.2
Oracle Openjdk	Version 11.0.3
Oracle Openjdk	Version 11.0.4
Oracle Openjdk	Version 11.0.5
Oracle Openjdk	Version 11.0.6
Oracle Openjdk	Version 11.0.7
Oracle Openjdk	Version 11
Oracle Openjdk	Version 13.0.1
Oracle Openjdk	Version 13.0.2
Oracle Openjdk	Version 13.0.3
Oracle Openjdk	Version 13
Oracle Openjdk	Version 14
Oracle Openjdk	Version 7
Oracle Openjdk	Version 7 update101
Oracle Openjdk	Version 7 update10
Oracle Openjdk	Version 7 update111
Oracle Openjdk	Version 7 update11
Oracle Openjdk	Version 7 update121
Oracle Openjdk	Version 7 update131
Oracle Openjdk	Version 7 update13
Oracle Openjdk	Version 7 update141
Oracle Openjdk	Version 7 update151
Oracle Openjdk	Version 7 update15
Oracle Openjdk	Version 7 update161
Oracle Openjdk	Version 7 update171
Oracle Openjdk	Version 7 update17
Oracle Openjdk	Version 7 update181
Oracle Openjdk	Version 7 update191
Oracle Openjdk	Version 7 update1
Oracle Openjdk	Version 7 update201
Oracle Openjdk	Version 7 update211
Oracle Openjdk	Version 7 update21
Oracle Openjdk	Version 7 update221
Oracle Openjdk	Version 7 update231
Oracle Openjdk	Version 7 update241
Oracle Openjdk	Version 7 update251
Oracle Openjdk	Version 7 update25
Oracle Openjdk	Version 7 update261
Oracle Openjdk	Version 7 update2
Oracle Openjdk	Version 8
Oracle Openjdk	Version 8 milestone1
Oracle Openjdk	Version 8 milestone2
Oracle Openjdk	Version 8 milestone3
Oracle Openjdk	Version 8 milestone4
Oracle Openjdk	Version 8 milestone5
Oracle Openjdk	Version 8 milestone6
Oracle Openjdk	Version 8 milestone7
Oracle Openjdk	Version 8 milestone8
Oracle Openjdk	Version 8 milestone9
Oracle Openjdk	Version 8 update101
Oracle Openjdk	Version 8 update102
Oracle Openjdk	Version 8 update111
Oracle Openjdk	Version 8 update112
Oracle Openjdk	Version 8 update11
Oracle Openjdk	Version 8 update121
Oracle Openjdk	Version 8 update131
Oracle Openjdk	Version 8 update141
Oracle Openjdk	Version 8 update151
Oracle Openjdk	Version 8 update152
Oracle Openjdk	Version 8 update161
Oracle Openjdk	Version 8 update162
Oracle Openjdk	Version 8 update171
Oracle Openjdk	Version 8 update172
Oracle Openjdk	Version 8 update181
Oracle Openjdk	Version 8 update191
Oracle Openjdk	Version 8 update192
Oracle Openjdk	Version 8 update201
Oracle Openjdk	Version 8 update202
Oracle Openjdk	Version 8 update20
Oracle Openjdk	Version 8 update211
Oracle Openjdk	Version 8 update212
Oracle Openjdk	Version 8 update221
Oracle Openjdk	Version 8 update222
Oracle Openjdk	Version 8 update231
Oracle Openjdk	Version 8 update232
Oracle Openjdk	Version 8 update241
Oracle Openjdk	Version 8 update242
Oracle Openjdk	Version 8 update252
Oracle Openjdk	Version 8 update25

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 1.7.0 update261
Oracle Jdk	Version 1.8.0 update251
Oracle Jdk	Version 11.0.7
Oracle Jdk	Version 14.0.1
Oracle Jre	Version 1.7.0 update261
Oracle Jre	Version 1.8.0 update251
Oracle Jre	Version 11.0.7
Oracle Jre	Version 14.0.1

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 31
Fedoraproject Fedora	Version 32

Configuration D

11 vulnerable

Vulnerable Software	Affected Versions
Mcafee Epolicy Orchestrator	Version 5.10.0
Mcafee Epolicy Orchestrator	Version 5.10.0 update_1
Mcafee Epolicy Orchestrator	Version 5.10.0 update_2
Mcafee Epolicy Orchestrator	Version 5.10.0 update_3
Mcafee Epolicy Orchestrator	Version 5.10.0 update_4
Mcafee Epolicy Orchestrator	Version 5.10.0 update_5
Mcafee Epolicy Orchestrator	Version 5.10.0 update_6
Mcafee Epolicy Orchestrator	Version 5.10.0 update_7
Mcafee Epolicy Orchestrator	Version 5.10.0 update_8
Mcafee Epolicy Orchestrator	Version 5.9.0
Mcafee Epolicy Orchestrator	Version 5.9.1

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.1
Opensuse Leap	Version 15.2

Configuration F

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 18.04
Canonical Ubuntu Linux	Version 20.04

Configuration G

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Configuration H

17 vulnerable

Vulnerable Software	Affected Versions
Netapp 7 Mode Transition Tool	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Cloud Backup	All versions
Netapp Cloud Secure Agent	All versions
Netapp E Series Performance Analyzer	All versions
Netapp E Series Santricity Os Controller	From 11.0.0 to 11.70.2
Netapp E Series Santricity Storage Manager	All versions
Netapp E Series Santricity Web Services	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Unified Manager Core Package	All versions
Netapp Oncommand Workflow Automation	All versions
Netapp Plug In For Symantec Netbackup	All versions
Netapp Santricity Unified Manager	All versions
Netapp Snapmanager	All versions
Netapp Snapmanager	All versions
Netapp Steelstore Cloud Integrated Storage	All versions

References (34)

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00027.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00041.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10332

Source: secalert_us@oracle.com

Third Party Advisory

https://lists.apache.org/thread.html/rf96c5afb26b596b4b97883aa90b6c0b0fc4c26aaeea7123c21912103%40%3Cj-users.xerces.apache.org%3E

Source: secalert_us@oracle.com

Third Party Advisory

https://lists.debian.org/debian-lts-announce/2020/08/msg00021.html

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6CFJPOYF3CWYEPCDOAOCNFJTQIKKWPHW/

Source: secalert_us@oracle.com

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DFZ36XIW5ENQAW6BB7WHRFFTTJX7KGMR/

Source: secalert_us@oracle.com

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MEPHBZPNSLX43B26DWKB7OS6AROTS2BO/

Source: secalert_us@oracle.com

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QQUMIAON2YEFRONMIUVHAKYCIOLICDBA/

Source: secalert_us@oracle.com

Third Party Advisory

https://security.gentoo.org/glsa/202008-24

Source: secalert_us@oracle.com

Third Party Advisory

https://security.gentoo.org/glsa/202209-15

Source: secalert_us@oracle.com

Third Party Advisory

https://security.netapp.com/advisory/ntap-20200717-0005/

Source: secalert_us@oracle.com

Third Party Advisory

https://usn.ubuntu.com/4433-1/

Source: secalert_us@oracle.com

Third Party Advisory

https://usn.ubuntu.com/4453-1/

Source: secalert_us@oracle.com

Third Party Advisory

https://www.debian.org/security/2020/dsa-4734

Source: secalert_us@oracle.com

Mailing ListThird Party Advisory

https://www.oracle.com/security-alerts/cpujul2020.html

Source: secalert_us@oracle.com

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00019.html