{"url":"http://public2.vulnerablecode.io/api/packages/419784?format=json","purl":"pkg:apk/alpine/openjdk8@8.242.08-r0?arch=aarch64&distroversion=v3.14&reponame=community","type":"apk","namespace":"alpine","name":"openjdk8","version":"8.242.08-r0","qualifiers":{"arch":"aarch64","distroversion":"v3.14","reponame":"community"},"subpath":"","is_vulnerable":false,"next_non_vulnerable_version":"8.252.09-r0","latest_non_vulnerable_version":"8.302.08-r0","affected_by_vulnerabilities":[],"fixing_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96391?format=json","vulnerability_id":"VCID-4bmj-ys2s-mfdm","summary":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2601.json","reference_id":"","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2601.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2601","reference_id":"","reference_type":"","scores":[{"value":"0.00637","scoring_system":"epss","scoring_elements":"0.70871","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00637","scoring_system":"epss","scoring_elements":"0.70904","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00637","scoring_system":"epss","scoring_elements":"0.70921","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00637","scoring_system":"epss","scoring_elements":"0.70914","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2601"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790570","reference_id":"1790570","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790570"},{"reference_url":"https://seclists.org/bugtraq/2020/Feb/22","reference_id":"22","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://seclists.org/bugtraq/2020/Feb/22"},{"reference_url":"https://seclists.org/bugtraq/2020/Jan/24","reference_id":"24","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://seclists.org/bugtraq/2020/Jan/24"},{"reference_url":"https://usn.ubuntu.com/4257-1/","reference_id":"4257-1","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://usn.ubuntu.com/4257-1/"},{"reference_url":"https://www.debian.org/security/2020/dsa-4605","reference_id":"dsa-4605","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://www.debian.org/security/2020/dsa-4605"},{"reference_url":"https://www.debian.org/security/2020/dsa-4621","reference_id":"dsa-4621","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://www.debian.org/security/2020/dsa-4621"},{"reference_url":"https://security.gentoo.org/glsa/202101-19","reference_id":"GLSA-202101-19","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://security.gentoo.org/glsa/202101-19"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html","reference_id":"msg00034.html","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html","reference_id":"msg00050.html","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html","reference_id":"msg00060.html","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200122-0003/","reference_id":"ntap-20200122-0003","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://security.netapp.com/advisory/ntap-20200122-0003/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0122","reference_id":"RHSA-2020:0122","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0122"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0128","reference_id":"RHSA-2020:0128","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0128"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0157","reference_id":"RHSA-2020:0157","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0157"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0196","reference_id":"RHSA-2020:0196","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0196"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0202","reference_id":"RHSA-2020:0202","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0231","reference_id":"RHSA-2020:0231","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0231"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0232","reference_id":"RHSA-2020:0232","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0232"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0541","reference_id":"RHSA-2020:0541","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0541"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0632","reference_id":"RHSA-2020:0632","reference_type":"","scores":[{"value":"6.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:27Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0632"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3386","reference_id":"RHSA-2020:3386","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3386"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3387","reference_id":"RHSA-2020:3387","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3387"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3388","reference_id":"RHSA-2020:3388","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3388"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:5585","reference_id":"RHSA-2020:5585","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:5585"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/419784?format=json","purl":"pkg:apk/alpine/openjdk8@8.242.08-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.242.08-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2020-2601"],"risk_score":3.0,"exploitability":"0.5","weighted_severity":"6.1","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4bmj-ys2s-mfdm"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96393?format=json","vulnerability_id":"VCID-5nw8-z4jd-mkgd","summary":"Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2654.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2654.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2654","reference_id":"","reference_type":"","scores":[{"value":"0.00339","scoring_system":"epss","scoring_elements":"0.56982","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00339","scoring_system":"epss","scoring_elements":"0.56931","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00339","scoring_system":"epss","scoring_elements":"0.56976","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00339","scoring_system":"epss","scoring_elements":"0.56989","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2654"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1791217","reference_id":"1791217","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1791217"},{"reference_url":"https://seclists.org/bugtraq/2020/Feb/22","reference_id":"22","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://seclists.org/bugtraq/2020/Feb/22"},{"reference_url":"https://seclists.org/bugtraq/2020/Jan/24","reference_id":"24","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://seclists.org/bugtraq/2020/Jan/24"},{"reference_url":"https://usn.ubuntu.com/4257-1/","reference_id":"4257-1","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://usn.ubuntu.com/4257-1/"},{"reference_url":"https://www.debian.org/security/2020/dsa-4605","reference_id":"dsa-4605","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://www.debian.org/security/2020/dsa-4605"},{"reference_url":"https://www.debian.org/security/2020/dsa-4621","reference_id":"dsa-4621","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://www.debian.org/security/2020/dsa-4621"},{"reference_url":"https://security.gentoo.org/glsa/202101-19","reference_id":"GLSA-202101-19","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://security.gentoo.org/glsa/202101-19"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315","reference_id":"index?page=content&id=SB10315","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html","reference_id":"msg00034.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html","reference_id":"msg00050.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html","reference_id":"msg00060.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200122-0003/","reference_id":"ntap-20200122-0003","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://security.netapp.com/advisory/ntap-20200122-0003/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0122","reference_id":"RHSA-2020:0122","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0122"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0128","reference_id":"RHSA-2020:0128","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0128"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0157","reference_id":"RHSA-2020:0157","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0157"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0196","reference_id":"RHSA-2020:0196","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0196"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0202","reference_id":"RHSA-2020:0202","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0231","reference_id":"RHSA-2020:0231","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0231"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0232","reference_id":"RHSA-2020:0232","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0232"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0541","reference_id":"RHSA-2020:0541","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0541"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0632","reference_id":"RHSA-2020:0632","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:46Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0632"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2236","reference_id":"RHSA-2020:2236","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2236"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2237","reference_id":"RHSA-2020:2237","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2237"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2238","reference_id":"RHSA-2020:2238","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2238"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2239","reference_id":"RHSA-2020:2239","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2239"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:2241","reference_id":"RHSA-2020:2241","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:2241"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/419784?format=json","purl":"pkg:apk/alpine/openjdk8@8.242.08-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.242.08-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2020-2654"],"risk_score":1.6,"exploitability":"0.5","weighted_severity":"3.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-5nw8-z4jd-mkgd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96718?format=json","vulnerability_id":"VCID-68ng-p57n-h3gc","summary":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241 and 8u231; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2659.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2659.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2659","reference_id":"","reference_type":"","scores":[{"value":"0.00293","scoring_system":"epss","scoring_elements":"0.52882","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00293","scoring_system":"epss","scoring_elements":"0.52928","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00293","scoring_system":"epss","scoring_elements":"0.52948","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00293","scoring_system":"epss","scoring_elements":"0.52942","published_at":"2026-06-05T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2659"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1791284","reference_id":"1791284","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1791284"},{"reference_url":"https://seclists.org/bugtraq/2020/Feb/22","reference_id":"22","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://seclists.org/bugtraq/2020/Feb/22"},{"reference_url":"https://usn.ubuntu.com/4257-1/","reference_id":"4257-1","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://usn.ubuntu.com/4257-1/"},{"reference_url":"https://www.debian.org/security/2020/dsa-4621","reference_id":"dsa-4621","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://www.debian.org/security/2020/dsa-4621"},{"reference_url":"https://security.gentoo.org/glsa/202101-19","reference_id":"GLSA-202101-19","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://security.gentoo.org/glsa/202101-19"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html","reference_id":"msg00034.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html","reference_id":"msg00060.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200122-0003/","reference_id":"ntap-20200122-0003","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://security.netapp.com/advisory/ntap-20200122-0003/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0157","reference_id":"RHSA-2020:0157","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0157"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0196","reference_id":"RHSA-2020:0196","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0196"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0202","reference_id":"RHSA-2020:0202","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0231","reference_id":"RHSA-2020:0231","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0231"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0465","reference_id":"RHSA-2020:0465","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0465"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0467","reference_id":"RHSA-2020:0467","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0467"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0468","reference_id":"RHSA-2020:0468","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0468"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0469","reference_id":"RHSA-2020:0469","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0469"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0470","reference_id":"RHSA-2020:0470","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0470"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0541","reference_id":"RHSA-2020:0541","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0541"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0632","reference_id":"RHSA-2020:0632","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:02:31Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0632"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0856","reference_id":"RHSA-2020:0856","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:0856"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/419784?format=json","purl":"pkg:apk/alpine/openjdk8@8.242.08-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.242.08-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2020-2659"],"risk_score":1.6,"exploitability":"0.5","weighted_severity":"3.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-68ng-p57n-h3gc"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96392?format=json","vulnerability_id":"VCID-73av-tbdr-nygv","summary":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2604.json","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2604.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2604","reference_id":"","reference_type":"","scores":[{"value":"0.01699","scoring_system":"epss","scoring_elements":"0.82625","published_at":"2026-06-04T12:55:00Z"},{"value":"0.01699","scoring_system":"epss","scoring_elements":"0.82652","published_at":"2026-06-05T12:55:00Z"},{"value":"0.01699","scoring_system":"epss","scoring_elements":"0.82651","published_at":"2026-06-06T12:55:00Z"},{"value":"0.01699","scoring_system":"epss","scoring_elements":"0.82649","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2604"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790944","reference_id":"1790944","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790944"},{"reference_url":"https://seclists.org/bugtraq/2020/Feb/22","reference_id":"22","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://seclists.org/bugtraq/2020/Feb/22"},{"reference_url":"https://usn.ubuntu.com/4257-1/","reference_id":"4257-1","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://usn.ubuntu.com/4257-1/"},{"reference_url":"https://www.debian.org/security/2020/dsa-4621","reference_id":"dsa-4621","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://www.debian.org/security/2020/dsa-4621"},{"reference_url":"https://security.gentoo.org/glsa/202101-19","reference_id":"GLSA-202101-19","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://security.gentoo.org/glsa/202101-19"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315","reference_id":"index?page=content&id=SB10315","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html","reference_id":"msg00034.html","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html","reference_id":"msg00050.html","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html","reference_id":"msg00060.html","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200122-0003/","reference_id":"ntap-20200122-0003","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://security.netapp.com/advisory/ntap-20200122-0003/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0122","reference_id":"RHSA-2020:0122","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0122"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0128","reference_id":"RHSA-2020:0128","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0128"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0157","reference_id":"RHSA-2020:0157","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:0157"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0196","reference_id":"RHSA-2020:0196","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0196"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0202","reference_id":"RHSA-2020:0202","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0231","reference_id":"RHSA-2020:0231","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0231"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0232","reference_id":"RHSA-2020:0232","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0232"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0465","reference_id":"RHSA-2020:0465","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0465"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0467","reference_id":"RHSA-2020:0467","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0467"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0468","reference_id":"RHSA-2020:0468","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0468"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0469","reference_id":"RHSA-2020:0469","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0469"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0470","reference_id":"RHSA-2020:0470","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0470"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0541","reference_id":"RHSA-2020:0541","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0541"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0632","reference_id":"RHSA-2020:0632","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-30T14:42:05Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0632"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0856","reference_id":"RHSA-2020:0856","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:0856"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/419784?format=json","purl":"pkg:apk/alpine/openjdk8@8.242.08-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.242.08-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2020-2604"],"risk_score":3.6,"exploitability":"0.5","weighted_severity":"7.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-73av-tbdr-nygv"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96388?format=json","vulnerability_id":"VCID-944m-ryx9-hfhn","summary":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2583.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2583.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2583","reference_id":"","reference_type":"","scores":[{"value":"0.00519","scoring_system":"epss","scoring_elements":"0.67188","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00519","scoring_system":"epss","scoring_elements":"0.67148","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00519","scoring_system":"epss","scoring_elements":"0.67196","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00519","scoring_system":"epss","scoring_elements":"0.6718","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2583"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790444","reference_id":"1790444","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790444"},{"reference_url":"https://seclists.org/bugtraq/2020/Feb/22","reference_id":"22","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://seclists.org/bugtraq/2020/Feb/22"},{"reference_url":"https://seclists.org/bugtraq/2020/Jan/24","reference_id":"24","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://seclists.org/bugtraq/2020/Jan/24"},{"reference_url":"https://usn.ubuntu.com/4257-1/","reference_id":"4257-1","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://usn.ubuntu.com/4257-1/"},{"reference_url":"https://www.debian.org/security/2020/dsa-4605","reference_id":"dsa-4605","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://www.debian.org/security/2020/dsa-4605"},{"reference_url":"https://www.debian.org/security/2020/dsa-4621","reference_id":"dsa-4621","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://www.debian.org/security/2020/dsa-4621"},{"reference_url":"https://security.gentoo.org/glsa/202101-19","reference_id":"GLSA-202101-19","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://security.gentoo.org/glsa/202101-19"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315","reference_id":"index?page=content&id=SB10315","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html","reference_id":"msg00034.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html","reference_id":"msg00050.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html","reference_id":"msg00060.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200122-0003/","reference_id":"ntap-20200122-0003","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://security.netapp.com/advisory/ntap-20200122-0003/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0122","reference_id":"RHSA-2020:0122","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0122"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0128","reference_id":"RHSA-2020:0128","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0128"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0157","reference_id":"RHSA-2020:0157","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0157"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0196","reference_id":"RHSA-2020:0196","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0196"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0202","reference_id":"RHSA-2020:0202","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0231","reference_id":"RHSA-2020:0231","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0231"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0232","reference_id":"RHSA-2020:0232","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0232"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0465","reference_id":"RHSA-2020:0465","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0465"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0467","reference_id":"RHSA-2020:0467","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0467"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0468","reference_id":"RHSA-2020:0468","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0468"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0469","reference_id":"RHSA-2020:0469","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0469"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0470","reference_id":"RHSA-2020:0470","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0470"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0541","reference_id":"RHSA-2020:0541","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0541"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0632","reference_id":"RHSA-2020:0632","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:53Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0632"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0856","reference_id":"RHSA-2020:0856","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:0856"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/419784?format=json","purl":"pkg:apk/alpine/openjdk8@8.242.08-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.242.08-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2020-2583"],"risk_score":1.6,"exploitability":"0.5","weighted_severity":"3.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-944m-ryx9-hfhn"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96390?format=json","vulnerability_id":"VCID-a3jf-z5ky-23hx","summary":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2593.json","reference_id":"","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2593.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2593","reference_id":"","reference_type":"","scores":[{"value":"0.00752","scoring_system":"epss","scoring_elements":"0.73582","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00752","scoring_system":"epss","scoring_elements":"0.73573","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00752","scoring_system":"epss","scoring_elements":"0.73586","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00752","scoring_system":"epss","scoring_elements":"0.73546","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2593"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790884","reference_id":"1790884","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790884"},{"reference_url":"https://seclists.org/bugtraq/2020/Feb/22","reference_id":"22","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://seclists.org/bugtraq/2020/Feb/22"},{"reference_url":"https://seclists.org/bugtraq/2020/Jan/24","reference_id":"24","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://seclists.org/bugtraq/2020/Jan/24"},{"reference_url":"https://usn.ubuntu.com/4257-1/","reference_id":"4257-1","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://usn.ubuntu.com/4257-1/"},{"reference_url":"https://www.debian.org/security/2020/dsa-4605","reference_id":"dsa-4605","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://www.debian.org/security/2020/dsa-4605"},{"reference_url":"https://www.debian.org/security/2020/dsa-4621","reference_id":"dsa-4621","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://www.debian.org/security/2020/dsa-4621"},{"reference_url":"https://security.gentoo.org/glsa/202101-19","reference_id":"GLSA-202101-19","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://security.gentoo.org/glsa/202101-19"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315","reference_id":"index?page=content&id=SB10315","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html","reference_id":"msg00034.html","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html","reference_id":"msg00050.html","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html","reference_id":"msg00060.html","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200122-0003/","reference_id":"ntap-20200122-0003","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://security.netapp.com/advisory/ntap-20200122-0003/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0122","reference_id":"RHSA-2020:0122","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0122"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0128","reference_id":"RHSA-2020:0128","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0128"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0157","reference_id":"RHSA-2020:0157","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0157"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0196","reference_id":"RHSA-2020:0196","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0196"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0202","reference_id":"RHSA-2020:0202","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0231","reference_id":"RHSA-2020:0231","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0231"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0232","reference_id":"RHSA-2020:0232","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0232"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0465","reference_id":"RHSA-2020:0465","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0465"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0467","reference_id":"RHSA-2020:0467","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0467"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0468","reference_id":"RHSA-2020:0468","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0468"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0469","reference_id":"RHSA-2020:0469","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0469"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0470","reference_id":"RHSA-2020:0470","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0470"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0541","reference_id":"RHSA-2020:0541","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0541"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0632","reference_id":"RHSA-2020:0632","reference_type":"","scores":[{"value":"4.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:39Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0632"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0856","reference_id":"RHSA-2020:0856","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:0856"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/419784?format=json","purl":"pkg:apk/alpine/openjdk8@8.242.08-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.242.08-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2020-2593"],"risk_score":2.1,"exploitability":"0.5","weighted_severity":"4.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-a3jf-z5ky-23hx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/96389?format=json","vulnerability_id":"VCID-srwc-hcup-8uh7","summary":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2590.json","reference_id":"","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-2590.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2590","reference_id":"","reference_type":"","scores":[{"value":"0.00449","scoring_system":"epss","scoring_elements":"0.6396","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00449","scoring_system":"epss","scoring_elements":"0.63917","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00449","scoring_system":"epss","scoring_elements":"0.63958","published_at":"2026-06-07T12:55:00Z"},{"value":"0.00449","scoring_system":"epss","scoring_elements":"0.63968","published_at":"2026-06-06T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2020-2590"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2583"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2590"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2593"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2601"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2604"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2654"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2655"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-2659"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790556","reference_id":"1790556","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790556"},{"reference_url":"https://seclists.org/bugtraq/2020/Feb/22","reference_id":"22","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://seclists.org/bugtraq/2020/Feb/22"},{"reference_url":"https://seclists.org/bugtraq/2020/Jan/24","reference_id":"24","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://seclists.org/bugtraq/2020/Jan/24"},{"reference_url":"https://usn.ubuntu.com/4257-1/","reference_id":"4257-1","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://usn.ubuntu.com/4257-1/"},{"reference_url":"https://www.debian.org/security/2020/dsa-4605","reference_id":"dsa-4605","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://www.debian.org/security/2020/dsa-4605"},{"reference_url":"https://www.debian.org/security/2020/dsa-4621","reference_id":"dsa-4621","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://www.debian.org/security/2020/dsa-4621"},{"reference_url":"https://security.gentoo.org/glsa/202101-19","reference_id":"GLSA-202101-19","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://security.gentoo.org/glsa/202101-19"},{"reference_url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315","reference_id":"index?page=content&id=SB10315","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html","reference_id":"msg00034.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html","reference_id":"msg00050.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html","reference_id":"msg00060.html","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html"},{"reference_url":"https://security.netapp.com/advisory/ntap-20200122-0003/","reference_id":"ntap-20200122-0003","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://security.netapp.com/advisory/ntap-20200122-0003/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0122","reference_id":"RHSA-2020:0122","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0122"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0128","reference_id":"RHSA-2020:0128","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0128"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0157","reference_id":"RHSA-2020:0157","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0157"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0196","reference_id":"RHSA-2020:0196","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0196"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0202","reference_id":"RHSA-2020:0202","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0202"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0231","reference_id":"RHSA-2020:0231","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0231"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0232","reference_id":"RHSA-2020:0232","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0232"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0541","reference_id":"RHSA-2020:0541","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0541"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:0632","reference_id":"RHSA-2020:0632","reference_type":"","scores":[{"value":"3.7","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-30T15:04:44Z/"}],"url":"https://access.redhat.com/errata/RHSA-2020:0632"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3386","reference_id":"RHSA-2020:3386","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3386"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3387","reference_id":"RHSA-2020:3387","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3387"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:3388","reference_id":"RHSA-2020:3388","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:3388"},{"reference_url":"https://access.redhat.com/errata/RHSA-2020:5585","reference_id":"RHSA-2020:5585","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2020:5585"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/419784?format=json","purl":"pkg:apk/alpine/openjdk8@8.242.08-r0?arch=aarch64&distroversion=v3.14&reponame=community","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.242.08-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}],"aliases":["CVE-2020-2590"],"risk_score":1.6,"exploitability":"0.5","weighted_severity":"3.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-srwc-hcup-8uh7"}],"risk_score":null,"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apk/alpine/openjdk8@8.242.08-r0%3Farch=aarch64&distroversion=v3.14&reponame=community"}