Low severity · published Jul 15, 2020
CVE-2020-14573
Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot)
3.7
CVSS
3.4%
EPSS
No
On KEV
Description
Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
10.0 · source: NVD
ES
E-series Santricity OS Controller · Netapp
11.0.0 through 11.50.2 · source: NVD
ES
E-series Santricity Storage Manager · Netapp
All versions, or not specified · source: NVD
ES
E-series Santricity Unified Manager · Netapp
All versions, or not specified · source: NVD
ES
E-series Santricity Web Services Proxy · Netapp
All versions, or not specified · source: NVD
FE
Fedora · Fedoraproject
31; 32 · source: NVD
JD
Jdk · Oracle
11.0.7; 14.0.1 · source: NVD
LE
Leap · Opensuse
15.1; 15.2 · source: NVD
UL
Ubuntu Linux · Canonical
18.04; 20.04 · source: NVD