CVE-2020-1971

🗓️ 08 Dec 2020 16:15:11Reported by [email protected]Type

OpenSSL EDIPartyName GeneralName Type Comparison Vulnerability

Reporter	Title	Published	Views	Family All 570
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSL affect IBM Rational ClearQuest	29 Jun 202115:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® SDK for Node.js™ in IBM Cloud	11 Mar 202117:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System switch firmware products are affected by vulnerabilities in OpenSSL	7 Dec 202323:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in node.js may affect configuration editor used in IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-1971, CVE-2020-8265, CVE-2020-8287	25 Mar 202110:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in Node.js affect IBM Integration Bus & IBM App Connect Enterprise V11	19 Apr 202112:56	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL publicly disclosed vulnerability affects MessageGateway (CVE-2020-1971)	24 Feb 202116:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System	30 Apr 202110:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Integration is vulnerable to OpenSSL vulnerability (CVE-2020-1971)	1 Jul 202111:33	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSL vulnerability impacting Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop Client 4.0, and earlier (CVE-2020-1971)	4 Jun 202101:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202123:48	–	ibm

NVD

Node

openssl opensslRange1.0.2–1.0.2x

openssl opensslRange1.1.1–1.1.1i

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

fedoraproject fedoraMatch32

fedoraproject fedoraMatch33

Node

oracle api_gatewayMatch11.1.2.4.0

oracle business_intelligenceMatch5.5.0.0.0enterprise

oracle business_intelligenceMatch5.9.0.0.0enterprise

oracle business_intelligenceMatch12.2.1.3.0enterprise

oracle business_intelligenceMatch12.2.1.4.0enterprise

oracle communications_cloud_native_core_network_function_cloud_native_environmentMatch1.10.0

oracle communications_diameter_intelligence_hubRange8.0.0–8.1.0

oracle communications_diameter_intelligence_hubRange8.2.0–8.2.3

oracle communications_session_border_controllerMatchcz8.2

oracle communications_session_border_controllerMatchcz8.3

oracle communications_session_border_controllerMatchcz8.4

oracle communications_session_routerMatchcz8.2

oracle communications_session_routerMatchcz8.3

oracle communications_session_routerMatchcz8.4

oracle communications_subscriber-aware_load_balancerMatchcz8.2

oracle communications_subscriber-aware_load_balancerMatchcz8.3

oracle communications_subscriber-aware_load_balancerMatchcz8.4

oracle communications_unified_session_managerMatchscz8.2.5

oracle enterprise_communications_brokerMatchpcz3.1

oracle enterprise_communications_brokerMatchpcz3.2

oracle enterprise_communications_brokerMatchpcz3.3

oracle enterprise_manager_base_platformMatch13.3.0.0

oracle enterprise_manager_base_platformMatch13.4.0.0

oracle enterprise_manager_for_storage_managementMatch13.4.0.0

oracle enterprise_manager_ops_centerMatch12.4.0.0

oracle enterprise_session_border_controllerMatchcz8.2

oracle enterprise_session_border_controllerMatchcz8.3

oracle enterprise_session_border_controllerMatchcz8.4

oracle essbaseMatch21.2

oracle graalvmMatch19.3.4enterprise

oracle graalvmMatch20.3.0enterprise

oracle http_serverMatch12.2.1.4.0

oracle jd_edwards_enterpriseone_toolsRange<9.2.5.3

oracle jd_edwards_world_securityMatcha9.4

oracle mysqlRange≤8.0.22

oracle mysql_serverRange≤5.7.32

oracle mysql_serverRange8.0.15–8.0.22

oracle peoplesoft_enterprise_peopletoolsMatch8.56

oracle peoplesoft_enterprise_peopletoolsMatch8.57

oracle peoplesoft_enterprise_peopletoolsMatch8.58

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp clustered_data_ontap_antivirus_connectorMatch-

netapp data_ontapMatch-7-mode

netapp e-series_santricity_os_controllerRange11.0.0–11.60.3

netapp hci_management_nodeMatch-

netapp manageability_software_development_kitMatch-

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

netapp plug-in_for_symantec_netbackupMatch-

netapp santricity_smi-s_providerMatch-

netapp snapcenterMatch-

netapp solidfireMatch-

netapp hci_compute_nodeMatch-

netapp hci_storage_nodeMatch-

Node

AND

netapp ef600a_firmwareMatch-

netapp ef600aMatch-

Node

AND

netapp aff_a250_firmwareMatch-

netapp aff_a250Match-

Node

tenable log_correlation_engineRange<6.0.9

tenable nessus_network_monitorRange<5.13.1

Node

siemens sinec_infrastructure_network_servicesRange<1.0.1.1

Node

nodejs node.jsRange10.0.0–10.12.0-

nodejs node.jsRange10.13.0–10.23.1lts

nodejs node.jsRange12.0.0–12.12.0-

nodejs node.jsRange12.13.0–12.20.1lts

nodejs node.jsRange14.0.0–14.14.0-

nodejs node.jsRange14.15.0–14.15.4lts

nodejs node.jsRange15.0.0–15.5.0-

Source	Link
tenable	www.tenable.com/security/tns-2021-09
lists	www.lists.debian.org/debian-lts-announce/2020/12/msg00020.html
lists	www.lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E
tenable	www.tenable.com/security/tns-2020-11
oracle	www.oracle.com/security-alerts/cpuoct2021.html
lists	www.lists.debian.org/debian-lts-announce/2020/12/msg00021.html
tenable	www.tenable.com/security/tns-2021-10
openwall	www.openwall.com/lists/oss-security/2021/09/14/2
oracle	www.oracle.com/security-alerts/cpujan2021.html
openssl	www.openssl.org/news/secadv/20201208.txt

17 Jun 2026 03:02Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.3

CVSS 3.15.9

EPSS0.06968

CWE-476