Lucene search
IBM37DB81C8898C236A111B799AAF66BD234156F998C56157416D1E7D09F99E655CHistoryOct 22, 2020 - 9:58 p.m.
Security Bulletin: A vulnerability in IBM Java Runtime affects IBM SPSS Statistics
2020-10-2221:58:28
www.ibm.com
15
0.001 Low
EPSS
Percentile
28.5%
Summary
There is a vulnerability in IBM® Runtime Environment Java™ Versions 7.0, 7.1, and 8.0 used by IBM SPSS Statistics. IBM SPSS Statistics has addressed the applicable CVEs.
Vulnerability Details
CVEID:CVE-2020-2590
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Java SE Security component could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact, and no availability impact.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/174538 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| SPSS Statistics | 27.0 |
| SPSS Statistics | 26.0 |
| SPSS Statistics | 25.0 |
| SPSS Statistics | 24.0 |
| SPSS Statistics | 23.0 |
Remediation/Fixes
| Affected Products | Versions | Fixes |
|---|---|---|
| SPSS Statistics | 27.0 | Install Statistics 27 GA-IF003 |
| SPSS Statistics | 26.0 | Install Statistics 26 FP001-IF009 |
| SPSS Statistics | 25.0 | Install Statistics 25 FP002-IF010 |
| SPSS Statistics | 24.0 | Install Statistics 24 FP002-IF023 |
| SPSS Statistics | 23.0 | Install Statistics 23 FP003-IF021 |
Workarounds and Mitigations
None
Related
nvd
nvd
CVE-2020-2590
2020-01-15 17:15:19
ibm
ibm
Security Bulletin: Vulnerability in IBM Java SDK and IBM Java Runtime affects Rational Performance Tester
2020-12-16 19:59:25
Security Bulletin: A vulnerability in IBM Java Runtime affect IBM Spectrum Conductor and IBM Spectrum Conductor with Spark
2020-09-24 06:11:59
Security Bulletin: CVE-2020-2590 (deferred from Oracle Jan 2020 CPU)
2021-02-12 21:29:39
osv
osv
CVE-2020-2590
2020-01-15 17:15:19
openjdk-8 - security update
2020-02-12 00:00:00
openjdk-11 - security update
2020-01-19 00:00:00
cvelist
cvelist
CVE-2020-2590
2020-01-15 16:34:02
prion
prion
Design/Logic Flaw
2020-01-15 17:15:00
ubuntucve
ubuntucve
CVE-2020-2590
2020-01-15 00:00:00
cve
cve
CVE-2020-2590
2020-01-15 17:15:19
redhatcve
redhatcve
CVE-2020-2590
2020-01-15 11:39:19
debiancve
debiancve
CVE-2020-2590
2020-01-15 17:15:19
alpinelinux
alpinelinux
CVE-2020-2590
2020-01-15 17:15:19
veracode
veracode
Authorization Bypass
2020-01-17 01:47:10
symantec
symantec
Oracle Java SE/Java SE Embedded CVE-2020-2590 Remote Security Vulnerability
2020-01-14 00:00:00
f5
f5
openvas
openvas
Oracle Java SE Security Update (cpujan2020 - 01) - Windows
2020-01-16 00:00:00
Oracle Java SE Security Update (cpujan2020 - 01) - Linux
2020-01-16 00:00:00
CentOS: Security Advisory for java (CESA-2020:0196)
2020-01-29 00:00:00
centos
centos
java security update
2020-01-18 14:53:03
java security update
2020-02-27 22:12:52
java security update
2020-02-18 22:20:02
suse
suse
Security update for java-1_8_0-openjdk (important)
2020-01-29 00:00:00
Security update for java-11-openjdk (important)
2020-01-28 00:00:00
nessus
nessus
RHEL 6 : java-1.7.0-openjdk (RHSA-2020:0632)
2020-02-28 00:00:00
CentOS 8 : java-11-openjdk (CESA-2020:0128)
2021-02-01 00:00:00
CentOS 8 : java-1.8.0-openjdk (CESA-2020:0202)
2021-02-01 00:00:00
amazon
amazon
Important: java-1.8.0-openjdk
2020-02-17 19:51:00
Important: java-1.7.0-openjdk
2020-03-16 20:58:00
Important: java-1.8.0-openjdk
2020-02-20 01:00:00
oraclelinux
oraclelinux
java-11-openjdk security update
2020-01-16 00:00:00
java-11-openjdk security update
2020-01-20 00:00:00
java-1.7.0-openjdk security update
2020-02-19 00:00:00
redhat
redhat
(RHSA-2020:0157) Important: java-1.8.0-openjdk security update
2020-01-20 11:34:29
(RHSA-2020:0632) Important: java-1.7.0-openjdk security update
2020-02-27 14:09:26
(RHSA-2020:0196) Important: java-1.8.0-openjdk security update
2020-01-21 18:23:46
debian
debian
[SECURITY] [DLA 2128-1] openjdk-7 security update
2020-02-29 12:18:39
[SECURITY] [DSA 4621-1] openjdk-8 security update
2020-02-12 22:14:32
[SECURITY] [DSA 4605-1] openjdk-11 security update
2020-01-19 21:52:05
mageia
mageia
Updated java-1.8.0-openjdk packages fix security vulnerabilities
2020-01-30 21:28:34
ubuntu
ubuntu
OpenJDK vulnerabilities
2020-01-28 00:00:00
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2020-11-03 15:29:58
kaspersky
kaspersky
KLA11646 Multiple vulnerabilities in Oracle JRE
2020-01-05 00:00:00
0.001 Low
EPSS
Percentile
28.5%
Related for 37DB81C8898C236A111B799AAF66BD234156F998C56157416D1E7D09F99E655C