Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-2654
HistoryJan 15, 2020 - 5:15 p.m.

CVE-2020-2654

2020-01-1517:15:24
[email protected]
web.nvd.nist.gov
1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

4.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

JSON

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Affected configurations

NVD
Node
oraclejdkMatch1.7.0update241
OR
oraclejdkMatch1.8.0update231
OR
oraclejdkMatch11.0.5
OR
oraclejdkMatch13.0.1
OR
oraclejreMatch1.7.0update_241
OR
oraclejreMatch1.8.0update_231
OR
oraclejreMatch11.0.5
OR
oraclejreMatch13.0.1
Node
redhatenterprise_linuxMatch6.0
OR
redhatenterprise_linuxMatch7.0
OR
redhatenterprise_linuxMatch8.0
OR
redhatenterprise_linux_desktopMatch6.0
OR
redhatenterprise_linux_desktopMatch7.0
OR
redhatenterprise_linux_eusMatch7.7
OR
redhatenterprise_linux_eusMatch8.1
OR
redhatenterprise_linux_server_ausMatch7.7
OR
redhatenterprise_linux_server_tusMatch7.7
OR
redhatenterprise_linux_workstationMatch6.0
OR
redhatenterprise_linux_workstationMatch7.0
Node
oracleopenjdkMatch7-
OR
oracleopenjdkMatch7update241
OR
oracleopenjdkMatch7update80
OR
oracleopenjdkMatch7update85
OR
oracleopenjdkMatch8-
OR
oracleopenjdkMatch8update102
OR
oracleopenjdkMatch8update112
OR
oracleopenjdkMatch8update152
OR
oracleopenjdkMatch8update162
OR
oracleopenjdkMatch8update172
OR
oracleopenjdkMatch8update192
OR
oracleopenjdkMatch8update20
OR
oracleopenjdkMatch8update202
OR
oracleopenjdkMatch8update212
OR
oracleopenjdkMatch8update222
OR
oracleopenjdkMatch8update232
OR
oracleopenjdkMatch8update40
OR
oracleopenjdkMatch8update60
OR
oracleopenjdkMatch8update66
OR
oracleopenjdkMatch8update72
OR
oracleopenjdkMatch8update92
OR
oracleopenjdkMatch11
OR
oracleopenjdkMatch11.0.1
OR
oracleopenjdkMatch11.0.2
OR
oracleopenjdkMatch11.0.3
OR
oracleopenjdkMatch11.0.4
OR
oracleopenjdkMatch11.0.5
OR
oracleopenjdkMatch13
OR
oracleopenjdkMatch13.0.1
Node
debiandebian_linuxMatch8.0
OR
debiandebian_linuxMatch9.0
OR
debiandebian_linuxMatch10.0
Node
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch19.10
Node
netappactive_iq_unified_managerRange7.3≥windows
OR
netappactive_iq_unified_managerRange9.5≥vmware_vsphere
OR
netappe-series_performance_analyzerMatch-
OR
netappe-series_santricity_management_plug-insMatch-vmware_vcenter
OR
netappe-series_santricity_os_controllerRange11.0.0–11.60.1
OR
netappe-series_santricity_storage_managerMatch-
OR
netappe-series_santricity_web_services_proxyMatch-
OR
netapponcommand_insightMatch-
OR
netapponcommand_workflow_automationMatch-
OR
netappsantricity_unified_managerMatch-
OR
netappsteelstore_cloud_integrated_storageMatch-
Node
mcafeeepolicy_orchestratorMatch5.9.0
OR
mcafeeepolicy_orchestratorMatch5.9.1
OR
mcafeeepolicy_orchestratorMatch5.10.0-
OR
mcafeeepolicy_orchestratorMatch5.10.0update_1
OR
mcafeeepolicy_orchestratorMatch5.10.0update_2
OR
mcafeeepolicy_orchestratorMatch5.10.0update_3
OR
mcafeeepolicy_orchestratorMatch5.10.0update_4
OR
mcafeeepolicy_orchestratorMatch5.10.0update_5
OR
mcafeeepolicy_orchestratorMatch5.10.0update_6
Node
opensuseleapMatch15.1

References

Related

prion 1
ibm 103
cvelist 1
cve 1
symantec 1
redhatcve 1
veracode 1
ubuntucve 1
osv 4
alpinelinux 1
debiancve 1
f5 1
openvas 18
nessus 39
oraclelinux 4
redhat 7
centos 5
debian 3
suse 2
amazon 3
mageia 1
prion
prion
Design/Logic Flaw
2020-01-15 17:15:00
ibm
ibm
Security Bulletin: Java SE Vulnerability Affects IBM Control Center (CVE-2020-2654)
2020-07-16 19:01:27
Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Service Tester
2020-10-05 15:43:01
Security Bulletin: IBM Event Streams is affected by a Java vulnerability (CVE-2020-2654)
2020-08-10 12:45:43
cvelist
cvelist
CVE-2020-2654
2020-01-15 16:34:05
cve
cve
CVE-2020-2654
2020-01-15 17:15:24
symantec
symantec
Oracle Java SE CVE-2020-2654 Remote Security Vulnerability
2020-01-14 00:00:00
redhatcve
redhatcve
CVE-2020-2654
2020-01-15 11:39:24
veracode
veracode
Denial Of Service (DoS)
2020-01-17 01:47:11
ubuntucve
ubuntucve
CVE-2020-2654
2020-01-15 00:00:00
osv
osv
CVE-2020-2654
2020-01-15 17:15:24
openjdk-7 - security update
2020-02-29 00:00:00
openjdk-8 - security update
2020-02-12 00:00:00
alpinelinux
alpinelinux
CVE-2020-2654
2020-01-15 17:15:24
debiancve
debiancve
CVE-2020-2654
2020-01-15 17:15:24
f5
f5
K95453343 : Multiple Java vulnerabilities CVE-2020-2601, CVE-2020-2604, CVE-2020-2654
2021-03-26 00:00:00
openvas
openvas
Oracle Java SE Security Update (cpujan2020 - 01) - Linux
2020-01-16 00:00:00
Oracle Java SE Security Update (cpujan2020 - 01) - Windows
2020-01-16 00:00:00
CentOS: Security Advisory for java (CESA-2020:0157)
2020-01-29 00:00:00
nessus
nessus
Oracle Linux 7 : java-11-openjdk (ELSA-2020-0122)
2020-01-17 00:00:00
CentOS 6 : java-1.8.0-openjdk (CESA-2020:0157)
2020-01-30 00:00:00
CentOS 7 : java-11-openjdk (CESA-2020:0122)
2020-01-21 00:00:00
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2020-02-19 00:00:00
java-1.7.0-openjdk security update
2020-02-27 00:00:00
java-11-openjdk security update
2020-01-20 00:00:00
redhat
redhat
(RHSA-2020:0231) Important: java-1.8.0-openjdk security update
2020-01-27 08:07:14
(RHSA-2020:0232) Important: java-11-openjdk security update
2020-01-27 08:07:50
(RHSA-2020:0128) Important: java-11-openjdk security update
2020-01-16 12:27:40
centos
centos
java security update
2020-01-28 21:23:05
java security update
2020-01-18 14:53:03
java security update
2020-02-27 22:12:52
debian
debian
[SECURITY] [DLA 2128-1] openjdk-7 security update
2020-02-29 12:18:39
[SECURITY] [DSA 4605-1] openjdk-11 security update
2020-01-19 21:52:05
[SECURITY] [DSA 4621-1] openjdk-8 security update
2020-02-12 22:14:32
suse
suse
Security update for java-1_8_0-openjdk (important)
2020-01-29 00:00:00
Security update for java-11-openjdk (important)
2020-01-28 00:00:00
amazon
amazon
Important: java-1.8.0-openjdk
2020-02-17 19:51:00
Important: java-1.7.0-openjdk
2020-03-16 20:58:00
Important: java-1.8.0-openjdk
2020-02-20 01:00:00
mageia
mageia
Updated java-1.8.0-openjdk packages fix security vulnerabilities
2020-01-30 21:28:34

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

3.7 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

4.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

JSON
Related for NVD:CVE-2020-2654
prion1ibm103cvelist1cve1symantec1redhatcve1veracode1ubuntucve1osv4alpinelinux1debiancve1f51openvas18nessus39oraclelinux4redhat7centos5debian3suse2amazon3mageia1