CVE-2020-2816

Published: Apr 15, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).

Affected (117)

Products: Oracle: Jdk, Jre, Openjdk · Netapp: 7 Mode Transition Tool, Active Iq Unified Manager, Cloud Backup, E Series Performance Analyzer, E Series Santricity Os Controller, E Series Santricity Web Services, Oncommand Insight, Oncommand Workflow Automation, Plug In For Symantec Netbackup, Santricity Unified Manager, Snapmanager, Steelstore Cloud Integrated Storage, Storagegrid · Canonical: Ubuntu Linux · +2 more

Show all products

3 products

13 products

7 Mode Transition Tool

Active Iq Unified Manager

Cloud Backup

E Series Performance Analyzer

E Series Santricity Os Controller

E Series Santricity Web Services

Oncommand Insight

Oncommand Workflow Automation

Plug In For Symantec Netbackup

Santricity Unified Manager

Snapmanager

Steelstore Cloud Integrated Storage

1 product

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Oracle Jdk	Version 11.0.6
Oracle Jdk	Version 14.0.0
Oracle Jre	Version 11.0.6
Oracle Jre	Version 14.0.0

Configuration B

92 vulnerable

Vulnerable Software	Affected Versions
Oracle Openjdk	From 11 to 11.0.6
Oracle Openjdk	From 13 to 13.0.2
Oracle Openjdk	Version 14
Oracle Openjdk	Version 7
Oracle Openjdk	Version 7 update101
Oracle Openjdk	Version 7 update10
Oracle Openjdk	Version 7 update111
Oracle Openjdk	Version 7 update11
Oracle Openjdk	Version 7 update121
Oracle Openjdk	Version 7 update131
Oracle Openjdk	Version 7 update13
Oracle Openjdk	Version 7 update141
Oracle Openjdk	Version 7 update151
Oracle Openjdk	Version 7 update15
Oracle Openjdk	Version 7 update161
Oracle Openjdk	Version 7 update171
Oracle Openjdk	Version 7 update17
Oracle Openjdk	Version 7 update181
Oracle Openjdk	Version 7 update191
Oracle Openjdk	Version 7 update1
Oracle Openjdk	Version 7 update201
Oracle Openjdk	Version 7 update211
Oracle Openjdk	Version 7 update21
Oracle Openjdk	Version 7 update221
Oracle Openjdk	Version 7 update231
Oracle Openjdk	Version 7 update241
Oracle Openjdk	Version 7 update251
Oracle Openjdk	Version 7 update25
Oracle Openjdk	Version 7 update2
Oracle Openjdk	Version 7 update3
Oracle Openjdk	Version 7 update40
Oracle Openjdk	Version 7 update45
Oracle Openjdk	Version 7 update4
Oracle Openjdk	Version 7 update51
Oracle Openjdk	Version 7 update55
Oracle Openjdk	Version 7 update5
Oracle Openjdk	Version 7 update60
Oracle Openjdk	Version 7 update65
Oracle Openjdk	Version 7 update67
Oracle Openjdk	Version 7 update6
Oracle Openjdk	Version 7 update72
Oracle Openjdk	Version 7 update76
Oracle Openjdk	Version 7 update7
Oracle Openjdk	Version 7 update80
Oracle Openjdk	Version 7 update85
Oracle Openjdk	Version 7 update91
Oracle Openjdk	Version 7 update95
Oracle Openjdk	Version 7 update97
Oracle Openjdk	Version 7 update99
Oracle Openjdk	Version 7 update9
Oracle Openjdk	Version 8
Oracle Openjdk	Version 8 update101
Oracle Openjdk	Version 8 update102
Oracle Openjdk	Version 8 update111
Oracle Openjdk	Version 8 update112
Oracle Openjdk	Version 8 update11
Oracle Openjdk	Version 8 update121
Oracle Openjdk	Version 8 update131
Oracle Openjdk	Version 8 update141
Oracle Openjdk	Version 8 update151
Oracle Openjdk	Version 8 update152
Oracle Openjdk	Version 8 update161
Oracle Openjdk	Version 8 update162
Oracle Openjdk	Version 8 update171
Oracle Openjdk	Version 8 update172
Oracle Openjdk	Version 8 update181
Oracle Openjdk	Version 8 update191
Oracle Openjdk	Version 8 update192
Oracle Openjdk	Version 8 update201
Oracle Openjdk	Version 8 update202
Oracle Openjdk	Version 8 update20
Oracle Openjdk	Version 8 update211
Oracle Openjdk	Version 8 update212
Oracle Openjdk	Version 8 update221
Oracle Openjdk	Version 8 update231
Oracle Openjdk	Version 8 update241
Oracle Openjdk	Version 8 update25
Oracle Openjdk	Version 8 update31
Oracle Openjdk	Version 8 update40
Oracle Openjdk	Version 8 update45
Oracle Openjdk	Version 8 update51
Oracle Openjdk	Version 8 update5
Oracle Openjdk	Version 8 update60
Oracle Openjdk	Version 8 update65
Oracle Openjdk	Version 8 update66
Oracle Openjdk	Version 8 update71
Oracle Openjdk	Version 8 update72
Oracle Openjdk	Version 8 update73
Oracle Openjdk	Version 8 update74
Oracle Openjdk	Version 8 update77
Oracle Openjdk	Version 8 update91
Oracle Openjdk	Version 8 update92

Configuration C

16 vulnerable

Vulnerable Software	Affected Versions
Netapp 7 Mode Transition Tool	All versions
Netapp Active Iq Unified Manager	From 9.5
Netapp Active Iq Unified Manager	From 7.3
Netapp Cloud Backup	All versions
Netapp E Series Performance Analyzer	All versions
Netapp E Series Santricity Os Controller	From 11.0.0 to 11.60.1
Netapp E Series Santricity Web Services	All versions
Netapp Oncommand Insight	All versions
Netapp Oncommand Workflow Automation	All versions
Netapp Plug In For Symantec Netbackup	All versions
Netapp Santricity Unified Manager	All versions
Netapp Snapmanager	All versions
Netapp Snapmanager	All versions
Netapp Steelstore Cloud Integrated Storage	All versions
Netapp Storagegrid	From 9.0.0 to 9.0.4
Netapp Storagegrid	All versions