The vulnerability of the JSE component of Oracle Java SE software allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

🗓️ 05 Jun 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Oracle Java SE JSE component flaw enables data modification or access to protected information due to poor input validation.

Reporter	Title	Published	Views	Family All 108
IBM Security Bulletins	Security Bulletin: Java Quarterly CPU affecting Watson Knowledge Catalog for IBM Cloud Pak for Data	4 Sep 202013:53	–	ibm
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Service is impacted by security vulnerabilities in OpenJDK 11	31 Jul 202022:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenJDK version 8 affect IBM InfoSphere Information Server	1 Apr 202120:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Open JDK affecting Rational Functional Tester	29 Jan 202116:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in OpenJDK version 11 affect IBM InfoSphere Information Server	1 Apr 202120:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Java	19 Jun 202005:06	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package java-11-openjdk version 0:11.0.12.7-alt1_0jpp10	25 Aug 202100:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : java-11-amazon-corretto (ALAS-2020-1410)	16 Apr 202000:00	–	nessus
Tenable Nessus	Amazon Corretto Java 11.x < 11.0.7.10.1 Multiple Vulnerabilities	1 Apr 202200:00	–	nessus
Tenable Nessus	CentOS 8 : java-11-openjdk (CESA-2020:1514)	1 Feb 202100:00	–	nessus

Vulners

Node

oracle java_seMatch11.0.6

OR

oracle java_seMatch14

OR

canonical ubuntuMatch19.10

Source	Link
oracle	www.oracle.com/security-alerts/cpuapr2020.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-2816
people	www.people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-2816.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-2816
web	www.web.nvd.nist.gov/view/vuln/detail

05 Jun 2020 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 37.5

CVSS 27.8

EPSS0.02698

remote access data modification data addition data deletion input validation oracle java se