Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/387688?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "type": "apk", "namespace": "alpine", "name": "openjdk8", "version": "8.252.09-r0", "qualifiers": { "arch": "x86_64", "distroversion": "v3.19", "reponame": "community" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "8.272.10-r0", "latest_non_vulnerable_version": "8.402.06-r0", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96396?format=api", "vulnerability_id": "VCID-1ktz-k2r1-vka2", "summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2755.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2755.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00186", "scoring_system": "epss", "scoring_elements": "0.40222", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00208", "scoring_system": "epss", "scoring_elements": "0.43285", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00208", "scoring_system": "epss", "scoring_elements": "0.43294", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00208", "scoring_system": "epss", "scoring_elements": "0.43212", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00223", "scoring_system": "epss", "scoring_elements": "0.45076", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00223", "scoring_system": "epss", "scoring_elements": "0.45064", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823200", "reference_id": "1823200", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823200" }, { "reference_url": "https://usn.ubuntu.com/4337-1/", "reference_id": "4337-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "https://usn.ubuntu.com/4337-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/", "reference_id": "CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4662", "reference_id": "dsa-4662", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4662" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4668", "reference_id": "dsa-4668", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4668" }, { "reference_url": "https://security.gentoo.org/glsa/202006-22", "reference_id": "GLSA-202006-22", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "https://security.gentoo.org/glsa/202006-22" }, { "reference_url": "https://security.gentoo.org/glsa/202209-15", "reference_id": "GLSA-202209-15", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "https://security.gentoo.org/glsa/202209-15" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/", "reference_id": "L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html", "reference_id": "msg00048.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0004/", "reference_id": "ntap-20200416-0004", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0004/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/", "reference_id": "NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:10Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1506", "reference_id": "RHSA-2020:1506", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1506" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1509", "reference_id": "RHSA-2020:1509", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1509" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1512", "reference_id": "RHSA-2020:1512", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1512" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1514", "reference_id": "RHSA-2020:1514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1514" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1515", "reference_id": "RHSA-2020:1515", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1516", "reference_id": "RHSA-2020:1516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1517", "reference_id": "RHSA-2020:1517", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1517" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2237", "reference_id": "RHSA-2020:2237", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2237" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2239", "reference_id": "RHSA-2020:2239", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2241", "reference_id": "RHSA-2020:2241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2241" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2020-2755" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1ktz-k2r1-vka2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96402?format=api", "vulnerability_id": "VCID-2gtp-m43g-zqez", "summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2781.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2781.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00255", "scoring_system": "epss", "scoring_elements": "0.49144", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00268", "scoring_system": "epss", "scoring_elements": "0.5056", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00268", "scoring_system": "epss", "scoring_elements": "0.50567", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00268", "scoring_system": "epss", "scoring_elements": "0.50498", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00322", "scoring_system": "epss", "scoring_elements": "0.55589", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00322", "scoring_system": "epss", "scoring_elements": "0.5557", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823960", "reference_id": "1823960", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823960" }, { "reference_url": "https://usn.ubuntu.com/4337-1/", "reference_id": "4337-1", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://usn.ubuntu.com/4337-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/", "reference_id": "CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4662", "reference_id": "dsa-4662", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4662" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4668", "reference_id": "dsa-4668", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4668" }, { "reference_url": "https://security.gentoo.org/glsa/202006-22", "reference_id": "GLSA-202006-22", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://security.gentoo.org/glsa/202006-22" }, { "reference_url": "https://security.gentoo.org/glsa/202209-15", "reference_id": "GLSA-202209-15", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://security.gentoo.org/glsa/202209-15" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10318", "reference_id": "index?page=content&id=SB10318", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10318" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/", "reference_id": "L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html", "reference_id": "msg00048.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0004/", "reference_id": "ntap-20200416-0004", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0004/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/", "reference_id": "NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:57:27Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1506", "reference_id": "RHSA-2020:1506", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1506" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1507", "reference_id": "RHSA-2020:1507", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1507" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1508", "reference_id": "RHSA-2020:1508", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1508" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1509", "reference_id": "RHSA-2020:1509", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1509" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1512", "reference_id": "RHSA-2020:1512", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1512" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1514", "reference_id": "RHSA-2020:1514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1514" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1515", "reference_id": "RHSA-2020:1515", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1516", "reference_id": "RHSA-2020:1516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1517", "reference_id": "RHSA-2020:1517", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1517" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2236", "reference_id": "RHSA-2020:2236", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2236" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2237", "reference_id": "RHSA-2020:2237", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2237" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2238", "reference_id": "RHSA-2020:2238", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2238" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2239", "reference_id": "RHSA-2020:2239", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2241", "reference_id": "RHSA-2020:2241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2241" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2020-2781" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-2gtp-m43g-zqez" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96407?format=api", "vulnerability_id": "VCID-4s25-9827-6kg1", "summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2830.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2830.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00222", "scoring_system": "epss", "scoring_elements": "0.44923", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00234", "scoring_system": "epss", "scoring_elements": "0.464", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00234", "scoring_system": "epss", "scoring_elements": "0.46402", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00234", "scoring_system": "epss", "scoring_elements": "0.46333", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0032", "scoring_system": "epss", "scoring_elements": "0.55397", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.0032", "scoring_system": "epss", "scoring_elements": "0.55378", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2830" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823542", "reference_id": "1823542", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823542" }, { "reference_url": "https://usn.ubuntu.com/4337-1/", "reference_id": "4337-1", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "https://usn.ubuntu.com/4337-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/", "reference_id": "CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4662", "reference_id": "dsa-4662", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4662" }, { "reference_url": "https://security.gentoo.org/glsa/202006-22", "reference_id": "GLSA-202006-22", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "https://security.gentoo.org/glsa/202006-22" }, { "reference_url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10318", "reference_id": "index?page=content&id=SB10318", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "https://kc.mcafee.com/corporate/index?page=content&id=SB10318" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/", "reference_id": "L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html", "reference_id": "msg00048.html", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0004/", "reference_id": "ntap-20200416-0004", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0004/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/", "reference_id": "NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-27T17:53:52Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1506", "reference_id": "RHSA-2020:1506", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1506" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1507", "reference_id": "RHSA-2020:1507", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1507" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1508", "reference_id": "RHSA-2020:1508", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1508" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1509", "reference_id": "RHSA-2020:1509", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1509" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1512", "reference_id": "RHSA-2020:1512", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1512" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1514", "reference_id": "RHSA-2020:1514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1514" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1515", "reference_id": "RHSA-2020:1515", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1516", "reference_id": "RHSA-2020:1516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1517", "reference_id": "RHSA-2020:1517", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1517" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2236", "reference_id": "RHSA-2020:2236", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2236" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2237", "reference_id": "RHSA-2020:2237", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2237" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2238", "reference_id": "RHSA-2020:2238", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2238" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2239", "reference_id": "RHSA-2020:2239", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2241", "reference_id": "RHSA-2020:2241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2241" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2020-2830" ], "risk_score": 2.4, "exploitability": "0.5", "weighted_severity": "4.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4s25-9827-6kg1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96405?format=api", "vulnerability_id": "VCID-52ek-r9cb-6kd7", "summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2805.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2805.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.01103", "scoring_system": "epss", "scoring_elements": "0.78439", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.01103", "scoring_system": "epss", "scoring_elements": "0.78421", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.01833", "scoring_system": "epss", "scoring_elements": "0.83293", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.01833", "scoring_system": "epss", "scoring_elements": "0.83265", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.01833", "scoring_system": "epss", "scoring_elements": "0.83291", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.01939", "scoring_system": "epss", "scoring_elements": "0.83768", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823844", "reference_id": "1823844", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823844" }, { "reference_url": "https://usn.ubuntu.com/4337-1/", "reference_id": "4337-1", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "https://usn.ubuntu.com/4337-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/", "reference_id": "CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4662", "reference_id": "dsa-4662", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4662" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4668", "reference_id": "dsa-4668", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4668" }, { "reference_url": "https://security.gentoo.org/glsa/202006-22", "reference_id": "GLSA-202006-22", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "https://security.gentoo.org/glsa/202006-22" }, { "reference_url": "https://security.gentoo.org/glsa/202209-15", "reference_id": "GLSA-202209-15", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "https://security.gentoo.org/glsa/202209-15" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/", "reference_id": "L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html", "reference_id": "msg00048.html", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0004/", "reference_id": "ntap-20200416-0004", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0004/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/", "reference_id": "NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:30Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1506", "reference_id": "RHSA-2020:1506", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1506" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1507", "reference_id": "RHSA-2020:1507", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1507" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1508", "reference_id": "RHSA-2020:1508", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1508" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1509", "reference_id": "RHSA-2020:1509", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1509" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1512", "reference_id": "RHSA-2020:1512", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1512" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1514", "reference_id": "RHSA-2020:1514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1514" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1515", "reference_id": "RHSA-2020:1515", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1516", "reference_id": "RHSA-2020:1516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1517", "reference_id": "RHSA-2020:1517", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1517" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2236", "reference_id": "RHSA-2020:2236", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2236" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2237", "reference_id": "RHSA-2020:2237", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2237" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2238", "reference_id": "RHSA-2020:2238", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2238" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2239", "reference_id": "RHSA-2020:2239", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2241", "reference_id": "RHSA-2020:2241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2241" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2020-2805" ], "risk_score": 3.8, "exploitability": "0.5", "weighted_severity": "7.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-52ek-r9cb-6kd7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96395?format=api", "vulnerability_id": "VCID-5ayh-usmc-tkh7", "summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2754.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2754.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00263", "scoring_system": "epss", "scoring_elements": "0.49938", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00295", "scoring_system": "epss", "scoring_elements": "0.53075", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00295", "scoring_system": "epss", "scoring_elements": "0.53083", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00295", "scoring_system": "epss", "scoring_elements": "0.53015", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00316", "scoring_system": "epss", "scoring_elements": "0.54989", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00316", "scoring_system": "epss", "scoring_elements": "0.54969", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823199", "reference_id": "1823199", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823199" }, { "reference_url": "https://usn.ubuntu.com/4337-1/", "reference_id": "4337-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:12Z/" } ], "url": "https://usn.ubuntu.com/4337-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/", "reference_id": "CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:12Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4662", "reference_id": "dsa-4662", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:12Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4662" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4668", "reference_id": "dsa-4668", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:12Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4668" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/", "reference_id": "L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:12Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:12Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:12Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html", "reference_id": "msg00048.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:12Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0004/", "reference_id": "ntap-20200416-0004", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:12Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0004/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/", "reference_id": "NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:12Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1506", "reference_id": "RHSA-2020:1506", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1506" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1509", "reference_id": "RHSA-2020:1509", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1509" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1512", "reference_id": "RHSA-2020:1512", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1512" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1514", "reference_id": "RHSA-2020:1514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1514" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1515", "reference_id": "RHSA-2020:1515", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1516", "reference_id": "RHSA-2020:1516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1517", "reference_id": "RHSA-2020:1517", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1517" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2237", "reference_id": "RHSA-2020:2237", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2237" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2239", "reference_id": "RHSA-2020:2239", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2241", "reference_id": "RHSA-2020:2241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2241" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2020-2754" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5ayh-usmc-tkh7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96400?format=api", "vulnerability_id": "VCID-5v9z-v7yf-bbef", "summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2773.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2773.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.53037", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00294", "scoring_system": "epss", "scoring_elements": "0.53062", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00601", "scoring_system": "epss", "scoring_elements": "0.69914", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00601", "scoring_system": "epss", "scoring_elements": "0.69866", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00601", "scoring_system": "epss", "scoring_elements": "0.69905", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823224", "reference_id": "1823224", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823224" }, { "reference_url": "https://usn.ubuntu.com/4337-1/", "reference_id": "4337-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "https://usn.ubuntu.com/4337-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/", "reference_id": "CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4662", "reference_id": "dsa-4662", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4662" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4668", "reference_id": "dsa-4668", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4668" }, { "reference_url": "https://security.gentoo.org/glsa/202006-22", "reference_id": "GLSA-202006-22", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "https://security.gentoo.org/glsa/202006-22" }, { "reference_url": "https://security.gentoo.org/glsa/202209-15", "reference_id": "GLSA-202209-15", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "https://security.gentoo.org/glsa/202209-15" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/", "reference_id": "L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html", "reference_id": "msg00048.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0004/", "reference_id": "ntap-20200416-0004", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0004/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/", "reference_id": "NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:40Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1506", "reference_id": "RHSA-2020:1506", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1506" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1507", "reference_id": "RHSA-2020:1507", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1507" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1508", "reference_id": "RHSA-2020:1508", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1508" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1509", "reference_id": "RHSA-2020:1509", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1509" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1512", "reference_id": "RHSA-2020:1512", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1512" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1514", "reference_id": "RHSA-2020:1514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1514" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1515", "reference_id": "RHSA-2020:1515", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1516", "reference_id": "RHSA-2020:1516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1517", "reference_id": "RHSA-2020:1517", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1517" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0717", "reference_id": "RHSA-2021:0717", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0717" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:0736", "reference_id": "RHSA-2021:0736", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:0736" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2020-2773" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5v9z-v7yf-bbef" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96397?format=api", "vulnerability_id": "VCID-cvcj-7utn-fybb", "summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2756.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2756.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49615", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49687", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49677", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.4967", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00329", "scoring_system": "epss", "scoring_elements": "0.56138", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00329", "scoring_system": "epss", "scoring_elements": "0.56119", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823215", "reference_id": "1823215", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823215" }, { "reference_url": "https://usn.ubuntu.com/4337-1/", "reference_id": "4337-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "https://usn.ubuntu.com/4337-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/", "reference_id": "CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4662", "reference_id": "dsa-4662", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4662" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4668", "reference_id": "dsa-4668", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4668" }, { "reference_url": "https://security.gentoo.org/glsa/202006-22", "reference_id": "GLSA-202006-22", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "https://security.gentoo.org/glsa/202006-22" }, { "reference_url": "https://security.gentoo.org/glsa/202209-15", "reference_id": "GLSA-202209-15", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "https://security.gentoo.org/glsa/202209-15" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/", "reference_id": "L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html", "reference_id": "msg00048.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0004/", "reference_id": "ntap-20200416-0004", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0004/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/", "reference_id": "NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:07Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1506", "reference_id": "RHSA-2020:1506", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1506" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1507", "reference_id": "RHSA-2020:1507", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1507" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1508", "reference_id": "RHSA-2020:1508", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1508" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1509", "reference_id": "RHSA-2020:1509", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1509" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1512", "reference_id": "RHSA-2020:1512", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1512" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1514", "reference_id": "RHSA-2020:1514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1514" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1515", "reference_id": "RHSA-2020:1515", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1516", "reference_id": "RHSA-2020:1516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1517", "reference_id": "RHSA-2020:1517", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1517" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2236", "reference_id": "RHSA-2020:2236", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2236" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2237", "reference_id": "RHSA-2020:2237", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2237" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2238", "reference_id": "RHSA-2020:2238", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2238" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2239", "reference_id": "RHSA-2020:2239", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2241", "reference_id": "RHSA-2020:2241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2241" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2020-2756" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cvcj-7utn-fybb" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96398?format=api", "vulnerability_id": "VCID-e173-kqas-cqcz", "summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2757.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2757.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49615", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49687", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.49677", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0026", "scoring_system": "epss", "scoring_elements": "0.4967", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00329", "scoring_system": "epss", "scoring_elements": "0.56138", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00329", "scoring_system": "epss", "scoring_elements": "0.56119", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823216", "reference_id": "1823216", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823216" }, { "reference_url": "https://usn.ubuntu.com/4337-1/", "reference_id": "4337-1", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "https://usn.ubuntu.com/4337-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/", "reference_id": "CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4662", "reference_id": "dsa-4662", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4662" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4668", "reference_id": "dsa-4668", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4668" }, { "reference_url": "https://security.gentoo.org/glsa/202006-22", "reference_id": "GLSA-202006-22", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "https://security.gentoo.org/glsa/202006-22" }, { "reference_url": "https://security.gentoo.org/glsa/202209-15", "reference_id": "GLSA-202209-15", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "https://security.gentoo.org/glsa/202209-15" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/", "reference_id": "L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html", "reference_id": "msg00048.html", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0004/", "reference_id": "ntap-20200416-0004", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0004/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/", "reference_id": "NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:00:05Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1506", "reference_id": "RHSA-2020:1506", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1506" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1507", "reference_id": "RHSA-2020:1507", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1507" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1508", "reference_id": "RHSA-2020:1508", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1508" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1509", "reference_id": "RHSA-2020:1509", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1509" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1512", "reference_id": "RHSA-2020:1512", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1512" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1514", "reference_id": "RHSA-2020:1514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1514" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1515", "reference_id": "RHSA-2020:1515", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1516", "reference_id": "RHSA-2020:1516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1517", "reference_id": "RHSA-2020:1517", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1517" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2236", "reference_id": "RHSA-2020:2236", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2236" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2237", "reference_id": "RHSA-2020:2237", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2237" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2238", "reference_id": "RHSA-2020:2238", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2238" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2239", "reference_id": "RHSA-2020:2239", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2241", "reference_id": "RHSA-2020:2241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2241" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2020-2757" ], "risk_score": 1.6, "exploitability": "0.5", "weighted_severity": "3.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e173-kqas-cqcz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96404?format=api", "vulnerability_id": "VCID-fqga-u2mm-1ydn", "summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2803.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2803.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02622", "scoring_system": "epss", "scoring_elements": "0.85972", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.02622", "scoring_system": "epss", "scoring_elements": "0.85958", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.03217", "scoring_system": "epss", "scoring_elements": "0.87277", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.03217", "scoring_system": "epss", "scoring_elements": "0.873", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.03217", "scoring_system": "epss", "scoring_elements": "0.87297", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.03393", "scoring_system": "epss", "scoring_elements": "0.87643", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823694", "reference_id": "1823694", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823694" }, { "reference_url": "https://usn.ubuntu.com/4337-1/", "reference_id": "4337-1", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "https://usn.ubuntu.com/4337-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/", "reference_id": "CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4662", "reference_id": "dsa-4662", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4662" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4668", "reference_id": "dsa-4668", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4668" }, { "reference_url": "https://security.gentoo.org/glsa/202006-22", "reference_id": "GLSA-202006-22", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "https://security.gentoo.org/glsa/202006-22" }, { "reference_url": "https://security.gentoo.org/glsa/202209-15", "reference_id": "GLSA-202209-15", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "https://security.gentoo.org/glsa/202209-15" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/", "reference_id": "L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html", "reference_id": "msg00048.html", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0004/", "reference_id": "ntap-20200416-0004", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0004/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/", "reference_id": "NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536", "reference_type": "", "scores": [ { "value": "8.3", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:41:31Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1506", "reference_id": "RHSA-2020:1506", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1506" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1507", "reference_id": "RHSA-2020:1507", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1507" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1508", "reference_id": "RHSA-2020:1508", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1508" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1509", "reference_id": "RHSA-2020:1509", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1509" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1512", "reference_id": "RHSA-2020:1512", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1512" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1514", "reference_id": "RHSA-2020:1514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1514" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1515", "reference_id": "RHSA-2020:1515", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1516", "reference_id": "RHSA-2020:1516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1517", "reference_id": "RHSA-2020:1517", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1517" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2236", "reference_id": "RHSA-2020:2236", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2236" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2237", "reference_id": "RHSA-2020:2237", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2237" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2238", "reference_id": "RHSA-2020:2238", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2238" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2239", "reference_id": "RHSA-2020:2239", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2241", "reference_id": "RHSA-2020:2241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2241" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2020-2803" ], "risk_score": 3.8, "exploitability": "0.5", "weighted_severity": "7.5", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fqga-u2mm-1ydn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/96403?format=api", "vulnerability_id": "VCID-vzbq-5pmc-mkbu", "summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2800.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2800.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00535", "scoring_system": "epss", "scoring_elements": "0.6783", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00535", "scoring_system": "epss", "scoring_elements": "0.67815", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00576", "scoring_system": "epss", "scoring_elements": "0.69221", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00606", "scoring_system": "epss", "scoring_elements": "0.70019", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00606", "scoring_system": "epss", "scoring_elements": "0.7006", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00606", "scoring_system": "epss", "scoring_elements": "0.70068", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2754" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2755" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2756" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2757" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2767" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2773" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2778" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2781" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2800" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2803" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2805" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2816" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2830" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823527", "reference_id": "1823527", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1823527" }, { "reference_url": "https://usn.ubuntu.com/4337-1/", "reference_id": "4337-1", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "https://usn.ubuntu.com/4337-1/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/", "reference_id": "CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CKAV6KFFAEANXAN73AFTGU7Z6YNRWCXQ/" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4662", "reference_id": "dsa-4662", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4662" }, { "reference_url": "https://www.debian.org/security/2020/dsa-4668", "reference_id": "dsa-4668", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "https://www.debian.org/security/2020/dsa-4668" }, { "reference_url": "https://security.gentoo.org/glsa/202006-22", "reference_id": "GLSA-202006-22", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "https://security.gentoo.org/glsa/202006-22" }, { "reference_url": "https://security.gentoo.org/glsa/202209-15", "reference_id": "GLSA-202209-15", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "https://security.gentoo.org/glsa/202209-15" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/", "reference_id": "L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7VHC4EW36KZEIDQ56RPCWBZCQELFFKN/" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html", "reference_id": "msg00000.html", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html", "reference_id": "msg00023.html", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00023.html" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html", "reference_id": "msg00024.html", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "https://lists.debian.org/debian-lts-announce/2020/04/msg00024.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html", "reference_id": "msg00048.html", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00048.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20200416-0004/", "reference_id": "ntap-20200416-0004", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "https://security.netapp.com/advisory/ntap-20200416-0004/" }, { "reference_url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/", "reference_id": "NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T14:59:16Z/" } ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYHHHZRHXCBGRHGE5UP7UEB4IZ2QX536/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1506", "reference_id": "RHSA-2020:1506", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1506" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1507", "reference_id": "RHSA-2020:1507", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1507" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1508", "reference_id": "RHSA-2020:1508", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1508" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1509", "reference_id": "RHSA-2020:1509", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1509" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1512", "reference_id": "RHSA-2020:1512", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1512" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1514", "reference_id": "RHSA-2020:1514", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1514" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1515", "reference_id": "RHSA-2020:1515", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1515" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1516", "reference_id": "RHSA-2020:1516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:1517", "reference_id": "RHSA-2020:1517", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:1517" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2236", "reference_id": "RHSA-2020:2236", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2236" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2237", "reference_id": "RHSA-2020:2237", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2237" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2238", "reference_id": "RHSA-2020:2238", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2238" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2239", "reference_id": "RHSA-2020:2239", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2239" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2020:2241", "reference_id": "RHSA-2020:2241", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2020:2241" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/387688?format=api", "purl": "pkg:apk/alpine/openjdk8@8.252.09-r0?arch=x86_64&distroversion=v3.19&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" } ], "aliases": [ "CVE-2020-2800" ], "risk_score": 2.1, "exploitability": "0.5", "weighted_severity": "4.3", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vzbq-5pmc-mkbu" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.252.09-r0%3Farch=x86_64&distroversion=v3.19&reponame=community" }