VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026

CVE-2020-2816

CVE-2020-2816

Description

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).

Affected products

132
  • NetApp/7 Mode Transition Tool
    cpe:2.3:a:netapp:7-mode_transition_tool:-:*:*:*:*:*:*:*
  • NetApp/Active Iq Unified Manager2 versions
    cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vsphere:*:*+ 1 more
    • cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vsphere:*:*range: >=9.5
    • cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*range: >=7.3
  • NetApp/Cloud Backup
    cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*
  • NetApp/E Series Performance Analyzer
    cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*
  • NetApp/E Series Santricity OS Controller
    cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*
    Range: >=11.0.0,<=11.60.1
  • NetApp/E Series Santricity Web Services
    cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*
  • NetApp/Oncommand Insight
    cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
  • NetApp/Oncommand Workflow Automation
    cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
  • NetApp/Plug In For Symantec Netbackup
    cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*
  • NetApp/Santricity Unified Manager
    cpe:2.3:a:netapp:santricity_unified_manager:-:*:*:*:*:*:*:*
  • NetApp/Snapmanager2 versions
    cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*+ 1 more
    • cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*
    • cpe:2.3:a:netapp:snapmanager:-:-:*:*:*:oracle:*:*
  • NetApp/Steelstore Cloud Integrated Storage
    cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*
  • NetApp/Storagegrid2 versions
    cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:netapp:storagegrid:*:*:*:*:*:*:*:*range: >=9.0.0,<=9.0.4
    • cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*
  • Oracle Corporation/Jdk2 versions
    cpe:2.3:a:oracle:jdk:11.0.6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:jdk:11.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:jdk:14.0.0:*:*:*:*:*:*:*
  • Oracle Corporation/Jre2 versions
    cpe:2.3:a:oracle:jre:11.0.6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oracle:jre:11.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:jre:14.0.0:*:*:*:*:*:*:*
  • Oracle Corporation/Openjdk91 versions
    cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*+ 90 more
    • cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*range: >=11,<=11.0.6
    • cpe:2.3:a:oracle:openjdk:14:*:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:-:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update101:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update10:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update111:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update11:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update121:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update131:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update13:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update141:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update151:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update15:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update161:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update171:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update17:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update181:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update191:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update1:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update201:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update211:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update21:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update221:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update231:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update241:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update251:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update25:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update2:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update3:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update40:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update45:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update4:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update51:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update55:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update5:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update60:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update65:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update67:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update6:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update72:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update76:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update7:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update91:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update95:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update97:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update99:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:7:update9:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update31:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update45:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update51:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update5:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update65:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update71:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update73:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update74:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update77:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update91:*:*:*:*:*:*
    • cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*
  • Canonical/Ubuntu Linux3 versions
    cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 2 more
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • OpenSUSE/Leap
    cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
  • Oracle Corporation/Java Sellm-fuzzy2 versions
    11.0.6, 14+ 1 more
    • (no CPE)range: 11.0.6, 14
    • (no CPE)range: Java SE: 11.0.6, 14
  • osv-coords14 versions
    pkg:bitnami/javapkg:bitnami/java-minpkg:bitnami/jrepkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Leap%2015.1pkg:rpm/opensuse/java-11-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/java-13-openjdk&distro=openSUSE%20Tumbleweedpkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP1pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/java-11-openjdk&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015
    >= 9.0.0, < 11.0.7+ 13 more
    • (no CPE)range: >= 9.0.0, < 11.0.7
    • (no CPE)range: >= 9.0.0, < 11.0.7
    • (no CPE)range: >= 9.0.0, < 11.0.7
    • (no CPE)range: < 11.0.7.0-lp151.3.16.1
    • (no CPE)range: < 11.0.12.0-3.1
    • (no CPE)range: < 13.0.8.0-3.1
    • (no CPE)range: < 11.0.7.0-3.42.4
    • (no CPE)range: < 11.0.7.0-3.42.4
    • (no CPE)range: < 11.0.7.0-3.42.4
    • (no CPE)range: < 11.0.7.0-3.42.4
    • (no CPE)range: < 11.0.7.0-3.9.2
    • (no CPE)range: < 11.0.7.0-3.42.4
    • (no CPE)range: < 11.0.7.0-3.9.2
    • (no CPE)range: < 11.0.7.0-3.42.4

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.