Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM9A0B89D81231C77811F2FA08626C240C63210552C011C8E0D5AAD619A7FE11A2
HistoryApr 06, 2021 - 1:54 p.m.

Security Bulletin: CVE-2020-14782 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

2021-04-0613:54:28
www.ibm.com
5

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

Summary

CVE-2020-14782 was disclosed as part of the Oracle October 2020 Critical Patch Update.

Vulnerability Details

CVEID:CVE-2020-14782
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact, and no availability impact.
CVSS Base score: 3.7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/190100 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
Content Collector for Email 4.0.1.x

Remediation/Fixes

Product VRM Remediation
Content Collector for Email 4.0.1 Use Content Collector for Email 4.0.1.11 Interim Fix IF002
Content Collector for File Systems 4.0.1 Use Content Collector for File Systems 4.0.1.11 Interim Fix IF002
Content Collector for Microsoft SharePoint 4.0.1 Use Content Collector for Microsoft SharePoint 4.0.1.11 Interim Fix IF002
Content Collector for IBM Connections 4.0.1 Use Content Collector for IBM Connections 4.0.1.11 Interim Fix IF002

Workarounds and Mitigations

None

CPENameOperatorVersion
content collectoreq4.0.1

Related

ibm 126
alpinelinux 1
prion 1
veracode 1
cve 1
redhatcve 1
debiancve 1
ubuntucve 1
f5 1
nessus 32
redhat 12
threatpost 1
openvas 6
oraclelinux 5
amazon 3
centos 3
mageia 1
fedora 1
osv 1
ibm
ibm
Security Bulletin: CVE-2020-14782 may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections
2021-04-06 13:59:04
Security Bulletin: Vulnerability deferred from Oracle Oct 2020 CPU for Java 8 SE may affect IBM® SDK, Java™ Technology Edition and IBM Operations Analytics Predictive Insights
2021-05-17 15:20:42
Security Bulletin: IBM Java SDK and IBM Java Runtime for IBM i is affected by CVE-2020-14782
2021-03-26 14:08:29
alpinelinux
alpinelinux
CVE-2020-14782
2020-10-21 15:15:00
prion
prion
Design/Logic Flaw
2020-10-21 15:15:00
veracode
veracode
Certificate Blacklist Bypass
2020-10-23 08:58:14
cve
cve
CVE-2020-14782
2020-10-21 15:15:00
redhatcve
redhatcve
CVE-2020-14782
2020-10-20 21:17:06
debiancve
debiancve
CVE-2020-14782
2020-10-21 15:15:00
ubuntucve
ubuntucve
CVE-2020-14782
2020-10-21 00:00:00
f5
f5
K000135534 : Java vulnerabilities CVE-2020-14779, CVE-2020-14782
2023-07-19 00:00:00
nessus
nessus
RHEL 8 : java-1.8.0-ibm (RHSA-2021:0736)
2021-03-05 00:00:00
RHEL 7 : java-1.8.0-ibm (RHSA-2021:0717)
2021-03-05 00:00:00
RHEL 7 : java-1.7.1-ibm (RHSA-2020:5586)
2020-12-18 00:00:00
redhat
redhat
(RHSA-2020:5586) Moderate: java-1.7.1-ibm security update
2020-12-16 14:59:17
(RHSA-2021:0717) Critical: java-1.8.0-ibm security update
2021-03-03 20:42:35
(RHSA-2021:0736) Critical: java-1.8.0-ibm security update
2021-03-04 17:36:10
threatpost
threatpost
IBM Squashes Critical Remote Code-Execution Flaw
2021-02-23 19:36:32
openvas
openvas
Huawei EulerOS: Security Advisory for java-1.8.0-openjdk (EulerOS-SA-2021-1982)
2021-06-29 00:00:00
Oracle Java SE Security Update (cpuoct2020 - 01) - Linux
2020-10-21 00:00:00
CentOS: Security Advisory for java (CESA-2020:4348)
2020-11-10 00:00:00
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2020-10-27 00:00:00
java-1.8.0-openjdk security and bug fix update
2020-10-27 00:00:00
java-11-openjdk security update
2020-10-23 00:00:00
amazon
amazon
Medium: java-1.8.0-openjdk
2021-01-12 22:51:00
Medium: java-1.8.0-openjdk
2021-01-05 23:34:00
Medium: java-1.8.0-openjdk
2020-12-16 20:31:00
centos
centos
java security update
2020-11-06 21:59:28
java security update
2020-11-06 21:58:30
java security update
2020-11-09 13:12:26
mageia
mageia
Updated java-1.8.0-openjdk packages fix security vulnerabilities
2020-11-14 00:20:36
fedora
fedora
[SECURITY] Fedora 32 Update: java-11-openjdk-11.0.9.11-0.fc32
2020-10-31 02:02:10
osv
osv
openjdk-8 - security update
2020-10-23 00:00:00

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON
Related for 9A0B89D81231C77811F2FA08626C240C63210552C011C8E0D5AAD619A7FE11A2
ibm126alpinelinux1prion1veracode1cve1redhatcve1debiancve1ubuntucve1f51nessus32redhat12threatpost1openvas6oraclelinux5amazon3centos3mageia1fedora1osv1