{"schemaVersion":3,"id":"CVE-2020-2754","aliases":["UBUNTU-CVE-2020-2754","DEBIAN-CVE-2020-2754","CGA-37qm-x8pm-hwhc","CGA-4pvm-p9v9-76vf","CGA-64xc-c75w-fqm4","CGA-6x8j-473g-4jm2","CGA-87h4-5cv7-5wjh","CGA-j3h9-vpgf-j2vv","CGA-2h26-vfxh-qr7p","CGA-38cv-wx69-gfjh","CGA-3p39-8g57-qrcr","CGA-43hp-7365-gxqw","CGA-52cv-3hpg-pxxh","CGA-658x-hc57-4fv3","CGA-73vg-c6hm-24h8","CGA-76hv-5frc-34m5","CGA-76xx-3v49-r727","CGA-7jp2-4j82-g2rx","CGA-95fc-fgj6-q48m","CGA-fg83-rg2f-2g24","CGA-fpjq-fcg9-g8fr","CGA-g9ph-6c94-r4mf","CGA-gjj5-r4gc-gf6f","CGA-h95c-8rfc-wghr","CGA-m2p6-6x3p-q268","CGA-m5hq-238c-7vm4","CGA-m62w-wh4h-rgjc","CGA-p2f9-7g7m-r585","CGA-p3rp-2v5m-p3m7","CGA-p8qp-2q2p-rqcm","CGA-pm5m-3mjm-3p9g","CGA-qp46-cgqq-wrhg","CGA-qx4g-868w-r3wr","CGA-w232-hgv8-g87g","CGA-wx9q-2r6x-72c3","CGA-x2p9-jx2g-48c4","CGA-x2ph-9x75-3hgx","CGA-xf24-mq5r-24wq","CGA-xfm8-4w5v-64p2","CGA-xxfp-mg24-789g"],"status":"published","duplicateOf":null,"title":null,"description":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).","dates":{"published":"2020-04-15T13:29:44.000Z","modified":"2024-09-30T15:42:05.656Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":3.7,"severity":"low","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":3.7,"severity":"low","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":5.6,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":3.7,"severity":"low","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":3.7,"severity":"low","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04128,"percentile":0.90688,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.04128},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04128,"percentile":0.90688}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04128,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04128,"percentile":0.90688}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"chainguard","product":"openjdk-10","name":"openjdk-10","label":"openjdk-10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-11-openj9-default-policy","name":"openjdk-11-openj9-default-policy","label":"openjdk-11-openj9-default-policy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-11-openj9-default-policy","purlType":"apk","versions":[{"text":"< 0.53.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-13-jre-base","name":"openjdk-13-jre-base","label":"openjdk-13-jre-base","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-13-jre-base","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-17-openj9-default-policy","name":"openjdk-17-openj9-default-policy","label":"openjdk-17-openj9-default-policy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-17-openj9-default-policy","purlType":"apk","versions":[{"text":"< 0.53.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-21-openj9-default-policy","name":"openjdk-21-openj9-default-policy","label":"openjdk-21-openj9-default-policy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-21-openj9-default-policy","purlType":"apk","versions":[{"text":"< 0.53.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9","name":"openjdk-25-openj9","label":"openjdk-25-openj9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-dbg","name":"openjdk-25-openj9-dbg","label":"openjdk-25-openj9-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-dbg","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-default-jdk","name":"openjdk-25-openj9-default-jdk","label":"openjdk-25-openj9-default-jdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-default-jdk","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-default-jvm","name":"openjdk-25-openj9-default-jvm","label":"openjdk-25-openj9-default-jvm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-default-jvm","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-jmods","name":"openjdk-25-openj9-jmods","label":"openjdk-25-openj9-jmods","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-jmods","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-25-openj9-jre","name":"openjdk-25-openj9-jre","label":"openjdk-25-openj9-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-25-openj9-jre","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9","name":"openjdk-26-openj9","label":"openjdk-26-openj9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-dbg","name":"openjdk-26-openj9-dbg","label":"openjdk-26-openj9-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-dbg","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-default-jdk","name":"openjdk-26-openj9-default-jdk","label":"openjdk-26-openj9-default-jdk","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-default-jdk","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-default-jvm","name":"openjdk-26-openj9-default-jvm","label":"openjdk-26-openj9-default-jvm","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-default-jvm","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-jmods","name":"openjdk-26-openj9-jmods","label":"openjdk-26-openj9-jmods","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-jmods","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-26-openj9-jre","name":"openjdk-26-openj9-jre","label":"openjdk-26-openj9-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-26-openj9-jre","purlType":"apk","versions":[{"text":"< 0.59.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.59.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-8-openj9-dbg","name":"openjdk-8-openj9-dbg","label":"openjdk-8-openj9-dbg","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-8-openj9-dbg","purlType":"apk","versions":[{"text":"< 0.53.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.53.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openjdk-9-jre","name":"openjdk-9-jre","label":"openjdk-9-jre","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openjdk-9-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-10","name":"openjdk-10","label":"openjdk-10","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-13-jre-base","name":"openjdk-13-jre-base","label":"openjdk-13-jre-base","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-13-jre-base","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"openjdk-9-jre","name":"openjdk-9-jre","label":"openjdk-9-jre","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/openjdk-9-jre","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"16.04","noFixRecorded":false,"fixedIn":null},{"text":"18.04","noFixRecorded":false,"fixedIn":null},{"text":"19.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"16.04 | 18.04 | 19.10","eol":{"isEol":true,"eolDate":"2021-04-02T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"16.04","label":"16.04 'Xenial Xerus' (LTS)","eolFrom":"2021-04-02T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"16.04.7"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"debian","product":"openjdk-11","name":"openjdk-11","label":"openjdk-11","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/openjdk-11","purlType":"deb","versions":[{"text":"< 11.0.7+10-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.7+10-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-8","name":"openjdk-8","label":"openjdk-8","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-8","purlType":"deb","versions":[{"text":"< 8u252-b09-1~16.04","noFixRecorded":false,"fixedIn":null},{"text":"< 8u252-b09-1~18.04","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8u252-b09-1~16.04 | < 8u252-b09-1~18.04","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"openjdk-lts","name":"openjdk-lts","label":"openjdk-lts","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/openjdk-lts","purlType":"deb","versions":[{"text":"< 11.0.7+10-2ubuntu2~18.04","noFixRecorded":false,"fixedIn":null},{"text":"< 11.0.7+10-2ubuntu1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 11.0.7+10-2ubuntu2~18.04 | < 11.0.7+10-2ubuntu1","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"9.0","noFixRecorded":false,"fixedIn":null},{"text":"10.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.0 | 10.0","eol":{"isEol":true,"eolDate":"2022-07-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"9","label":"9 (Stretch)","eolFrom":"2022-07-01T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"9.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"30","noFixRecorded":false,"fixedIn":null},{"text":"31","noFixRecorded":false,"fixedIn":null},{"text":"32","noFixRecorded":false,"fixedIn":null}],"versionsText":"30 | 31 | 32","eol":{"isEol":true,"eolDate":"2020-05-26T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"30","label":"30","eolFrom":"2020-05-26T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"mcafee","product":"epolicy_orchestrator","name":"epolicy orchestrator","label":"epolicy_orchestrator","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"5.9.0","noFixRecorded":false,"fixedIn":null},{"text":"5.9.1","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_1","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_2","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_3","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_4","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_5","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_6","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_7","noFixRecorded":false,"fixedIn":null},{"text":"5.10.0:update_8","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.9.0 | 5.9.1 | 5.10.0 | 5.10.0:update_1 | 5.10.0:update_2 | 5.10.0:update_3 | 5.10.0:update_4 | 5.10.0:update_5 | 5.10.0:update_6 | 5.10.0:update_7 | 5.10.0:update_8","eol":null,"hubHref":"/vendor/mcafee/epolicy_orchestrator"},{"vendor":"netapp","product":"active_iq_unified_manager","name":"active iq unified manager","label":"active_iq_unified_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 7.3","noFixRecorded":true,"fixedIn":null},{"text":"≥ 9.5","noFixRecorded":true,"fixedIn":null}],"versionsText":"≥ 7.3 (No fix recorded) | ≥ 9.5 (No fix recorded)","eol":null,"hubHref":"/vendor/netapp/active_iq_unified_manager"},{"vendor":"netapp","product":"e-series_santricity_os_controller","name":"e-series santricity os controller","label":"e-series_santricity_os_controller","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 11.0.0, ≤ 11.60.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 11.0.0, ≤ 11.60.1","eol":null,"hubHref":"/vendor/netapp/e-series_santricity_os_controller"},{"vendor":"netapp","product":"snapmanager","name":"snapmanager","label":"snapmanager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/netapp/snapmanager"},{"vendor":"netapp","product":"storagegrid","name":"storagegrid","label":"storagegrid","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 9.0.0, ≤ 9.0.4","noFixRecorded":false,"fixedIn":null},{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.0.0, ≤ 9.0.4 | na","eol":null,"hubHref":"/vendor/netapp/storagegrid"},{"vendor":"opensuse","product":"leap","name":"leap","label":"leap","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"15.1","noFixRecorded":false,"fixedIn":null},{"text":"15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"15.1 | 15.2","eol":{"isEol":true,"eolDate":"2021-02-02T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"15.1","label":"Leap 15.1","eolFrom":"2021-02-02T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/leap"},{"vendor":"oracle corporation","product":"java","name":"Java","label":"java","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Java SE: 8u241, 11.0.6, 14","noFixRecorded":false,"fixedIn":null},{"text":"Java SE Embedded: 8u241","noFixRecorded":false,"fixedIn":null}],"versionsText":"Java SE: 8u241, 11.0.6, 14 | Java SE Embedded: 8u241","eol":null,"hubHref":"/vendor/oracle_corporation/java"},{"vendor":"oracle","product":"jdk","name":"jdk","label":"jdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.8.0:update241","noFixRecorded":false,"fixedIn":null},{"text":"11.0.6","noFixRecorded":false,"fixedIn":null},{"text":"14.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.8.0:update241 | 11.0.6 | 14.0.0","eol":{"isEol":true,"eolDate":"2023-09-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11","label":"11 (LTS)","eolFrom":"2023-09-30T00:00:00.000Z","isLts":true,"isMaintained":true,"latestVersion":"11.0.32.1"},"product":{"name":"oracle-jdk","label":"Oracle JDK","category":"lang"}},"hubHref":"/vendor/oracle/jdk"},{"vendor":"oracle","product":"jre","name":"jre","label":"jre","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.8.0:update241","noFixRecorded":false,"fixedIn":null},{"text":"11.0.6","noFixRecorded":false,"fixedIn":null},{"text":"14.0.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.8.0:update241 | 11.0.6 | 14.0.0","eol":{"isEol":true,"eolDate":"2023-09-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11","label":"11 (LTS)","eolFrom":"2023-09-30T00:00:00.000Z","isLts":true,"isMaintained":true,"latestVersion":"11.0.32.1"},"product":{"name":"oracle-jdk","label":"Oracle JDK","category":"lang"}},"hubHref":"/vendor/oracle/jre"},{"vendor":"oracle","product":"openjdk","name":"openjdk","label":"openjdk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 11, ≤ 11.0.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 13, ≤ 13.0.2","noFixRecorded":false,"fixedIn":null},{"text":"7","noFixRecorded":false,"fixedIn":null},{"text":"7:update1","noFixRecorded":false,"fixedIn":null},{"text":"7:update10","noFixRecorded":false,"fixedIn":null},{"text":"7:update101","noFixRecorded":false,"fixedIn":null},{"text":"7:update11","noFixRecorded":false,"fixedIn":null},{"text":"7:update111","noFixRecorded":false,"fixedIn":null},{"text":"7:update121","noFixRecorded":false,"fixedIn":null},{"text":"7:update13","noFixRecorded":false,"fixedIn":null},{"text":"7:update131","noFixRecorded":false,"fixedIn":null},{"text":"7:update141","noFixRecorded":false,"fixedIn":null},{"text":"7:update15","noFixRecorded":false,"fixedIn":null},{"text":"7:update151","noFixRecorded":false,"fixedIn":null},{"text":"7:update161","noFixRecorded":false,"fixedIn":null},{"text":"7:update17","noFixRecorded":false,"fixedIn":null},{"text":"7:update171","noFixRecorded":false,"fixedIn":null},{"text":"7:update181","noFixRecorded":false,"fixedIn":null},{"text":"7:update191","noFixRecorded":false,"fixedIn":null},{"text":"7:update2","noFixRecorded":false,"fixedIn":null},{"text":"7:update201","noFixRecorded":false,"fixedIn":null},{"text":"7:update21","noFixRecorded":false,"fixedIn":null},{"text":"7:update211","noFixRecorded":false,"fixedIn":null},{"text":"7:update221","noFixRecorded":false,"fixedIn":null},{"text":"7:update231","noFixRecorded":false,"fixedIn":null},{"text":"7:update241","noFixRecorded":false,"fixedIn":null},{"text":"7:update25","noFixRecorded":false,"fixedIn":null},{"text":"7:update251","noFixRecorded":false,"fixedIn":null},{"text":"7:update3","noFixRecorded":false,"fixedIn":null},{"text":"7:update4","noFixRecorded":false,"fixedIn":null},{"text":"7:update40","noFixRecorded":false,"fixedIn":null},{"text":"7:update45","noFixRecorded":false,"fixedIn":null},{"text":"7:update5","noFixRecorded":false,"fixedIn":null},{"text":"7:update51","noFixRecorded":false,"fixedIn":null},{"text":"7:update55","noFixRecorded":false,"fixedIn":null},{"text":"7:update6","noFixRecorded":false,"fixedIn":null},{"text":"7:update60","noFixRecorded":false,"fixedIn":null},{"text":"7:update65","noFixRecorded":false,"fixedIn":null},{"text":"7:update67","noFixRecorded":false,"fixedIn":null},{"text":"7:update7","noFixRecorded":false,"fixedIn":null},{"text":"7:update72","noFixRecorded":false,"fixedIn":null},{"text":"7:update76","noFixRecorded":false,"fixedIn":null},{"text":"7:update80","noFixRecorded":false,"fixedIn":null},{"text":"7:update85","noFixRecorded":false,"fixedIn":null},{"text":"7:update9","noFixRecorded":false,"fixedIn":null},{"text":"7:update91","noFixRecorded":false,"fixedIn":null},{"text":"7:update95","noFixRecorded":false,"fixedIn":null},{"text":"7:update97","noFixRecorded":false,"fixedIn":null},{"text":"7:update99","noFixRecorded":false,"fixedIn":null},{"text":"8","noFixRecorded":false,"fixedIn":null},{"text":"8:update101","noFixRecorded":false,"fixedIn":null},{"text":"8:update102","noFixRecorded":false,"fixedIn":null},{"text":"8:update11","noFixRecorded":false,"fixedIn":null},{"text":"8:update111","noFixRecorded":false,"fixedIn":null},{"text":"8:update112","noFixRecorded":false,"fixedIn":null},{"text":"8:update121","noFixRecorded":false,"fixedIn":null},{"text":"8:update131","noFixRecorded":false,"fixedIn":null},{"text":"8:update141","noFixRecorded":false,"fixedIn":null},{"text":"8:update151","noFixRecorded":false,"fixedIn":null},{"text":"8:update152","noFixRecorded":false,"fixedIn":null},{"text":"8:update161","noFixRecorded":false,"fixedIn":null},{"text":"8:update162","noFixRecorded":false,"fixedIn":null},{"text":"8:update171","noFixRecorded":false,"fixedIn":null},{"text":"8:update172","noFixRecorded":false,"fixedIn":null},{"text":"8:update181","noFixRecorded":false,"fixedIn":null},{"text":"8:update191","noFixRecorded":false,"fixedIn":null},{"text":"8:update192","noFixRecorded":false,"fixedIn":null},{"text":"8:update20","noFixRecorded":false,"fixedIn":null},{"text":"8:update201","noFixRecorded":false,"fixedIn":null},{"text":"8:update202","noFixRecorded":false,"fixedIn":null},{"text":"8:update211","noFixRecorded":false,"fixedIn":null},{"text":"8:update212","noFixRecorded":false,"fixedIn":null},{"text":"8:update221","noFixRecorded":false,"fixedIn":null},{"text":"8:update231","noFixRecorded":false,"fixedIn":null},{"text":"8:update241","noFixRecorded":false,"fixedIn":null},{"text":"8:update25","noFixRecorded":false,"fixedIn":null},{"text":"8:update31","noFixRecorded":false,"fixedIn":null},{"text":"8:update40","noFixRecorded":false,"fixedIn":null},{"text":"8:update45","noFixRecorded":false,"fixedIn":null},{"text":"8:update5","noFixRecorded":false,"fixedIn":null},{"text":"8:update51","noFixRecorded":false,"fixedIn":null},{"text":"8:update60","noFixRecorded":false,"fixedIn":null},{"text":"8:update65","noFixRecorded":false,"fixedIn":null},{"text":"8:update66","noFixRecorded":false,"fixedIn":null},{"text":"8:update71","noFixRecorded":false,"fixedIn":null},{"text":"8:update72","noFixRecorded":false,"fixedIn":null},{"text":"8:update73","noFixRecorded":false,"fixedIn":null},{"text":"8:update74","noFixRecorded":false,"fixedIn":null},{"text":"8:update77","noFixRecorded":false,"fixedIn":null},{"text":"8:update91","noFixRecorded":false,"fixedIn":null},{"text":"8:update92","noFixRecorded":false,"fixedIn":null},{"text":"14","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 11, ≤ 11.0.6 | ≥ 13, ≤ 13.0.2 | 7 | 7:update1 | 7:update10 | 7:update101 | 7:update11 | 7:update111 | 7:update121 | 7:update13 | 7:update131 | 7:update141 | 7:update15 | 7:update151 | 7:update161 | 7:update17 | 7:update171 | 7:update181 | 7:update191 | 7:update2 | 7:update201 | 7:update21 | 7:update211 | 7:update221 | 7:update231 | 7:update241 | 7:update25 | 7:update251 | 7:update3 | 7:update4 | 7:update40 | 7:update45 | 7:update5 | 7:update51 | 7:update55 | 7:update6 | 7:update60 | 7:update65 | 7:update67 | 7:update7 | 7:update72 | 7:update76 | 7:update80 | 7:update85 | 7:update9 | 7:update91 | 7:update95 | 7:update97 | 7:update99 | 8 | 8:update101 | 8:update102 | 8:update11 | 8:update111 | 8:update112 | 8:update121 | 8:update131 | 8:update141 | 8:update151 | 8:update152 | 8:update161 | 8:update162 | 8:update171 | 8:update172 | 8:update181 | 8:update191 | 8:update192 | 8:update20 | 8:update201 | 8:update202 | 8:update211 | 8:update212 | 8:update221 | 8:update231 | 8:update241 | 8:update25 | 8:update31 | 8:update40 | 8:update45 | 8:update5 | 8:update51 | 8:update60 | 8:update65 | 8:update66 | 8:update71 | 8:update72 | 8:update73 | 8:update74 | 8:update77 | 8:update91 | 8:update92 | 14","eol":{"isEol":true,"eolDate":"2020-09-16T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"14","label":"14","eolFrom":"2020-09-16T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"14.0.2"},"product":{"name":"openjdk-builds-from-oracle","label":"OpenJDK builds from Oracle","category":"lang"}},"hubHref":"/vendor/oracle/openjdk"}],"affectedCount":38,"eol":{"hasEol":true,"count":7},"references":[{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","label":"www.oracle.com/security-alerts/cpuapr2020.html","hostname":"www.oracle.com","tags":["X Refsource MISC","REPORT","Advisory","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200416-0004/","label":"security.netapp.com/advisory/ntap-20200416-0004/","hostname":"security.netapp.com","tags":["X Refsource CONFIRM","Advisory","Third Party Advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4662","label":"www.debian.org/security/2020/dsa-4662","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Advisory","Third Party Advisory"]},{"url":"https://usn.ubuntu.com/4337-1/","label":"usn.ubuntu.com/4337-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Advisory","Third Party Advisory"]},{"url":"https://www.debian.org/security/2020/dsa-4668","label":"www.debian.org/security/2020/dsa-4668","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Advisory","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA","WEB"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html","label":"lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Advisory","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html","label":"lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Advisory","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html","label":"lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Advisory","Mailing List","Third Party Advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10332","label":"kc.mcafee.com/corporate/index?page=content&id=SB10332","hostname":"kc.mcafee.com","tags":["X Refsource CONFIRM","Advisory","Third Party Advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-2754","label":"ubuntu.com/security/CVE-2020-2754","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-4337-1","label":"ubuntu.com/security/notices/USN-4337-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2754","label":"www.cve.org/CVERecord?id=CVE-2020-2754","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-2754","label":"security-tracker.debian.org/tracker/CVE-2020-2754","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-4662-1","DSA-4668-1","MGASA-2020-0182","OPENSUSE-SU-2020:0757-1","OPENSUSE-SU-2020:0800-1","OPENSUSE-SU-2024:10871-1","OPENSUSE-SU-2024:10872-1","OPENSUSE-SU-2024:10875-1","OPENSUSE-SU-2024:10876-1","RHSA-2020:1506","RHSA-2020:1509","RHSA-2020:1512","RHSA-2020:1514","RHSA-2020:1515","RHSA-2020:1516","RHSA-2020:1517","RHSA-2020:2237","RHSA-2020:2239","RHSA-2020:2241","SUSE-SU-2020:1511-1","SUSE-SU-2020:1511-2","SUSE-SU-2020:1569-1","SUSE-SU-2020:1569-2","SUSE-SU-2020:1572-1","SUSE-SU-2020:1684-1","SUSE-SU-2020:1685-1","SUSE-SU-2020:1686-1","USN-4337-1"],"duplicates":[],"related":["CGA-2MRJ-2M2Q-5P34","CGA-9PVR-7F7P-33Q5","CGA-V34X-33XW-JMG2","CGA-VFXV-Q632-V39P","OPENSUSE-SU-2020:0757-1","OPENSUSE-SU-2020:0800-1","OPENSUSE-SU-2024:10871-1","OPENSUSE-SU-2024:10872-1","OPENSUSE-SU-2024:10875-1","OPENSUSE-SU-2024:10876-1","SUSE-SU-2020:1511-1","SUSE-SU-2020:1511-2","SUSE-SU-2020:1569-1","SUSE-SU-2020:1569-2","SUSE-SU-2020:1572-1","SUSE-SU-2020:1684-1","SUSE-SU-2020:1685-1","SUSE-SU-2020:1686-1","USN-4337-1"]},"timeline":[{"kind":"published","date":"2020-04-15T13:29:44.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-30T15:42:05.656Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:35:13.783Z","stale":false,"partial":false}}