{"id":"CVE-2020-2655","aliases":["ALPINE-CVE-2020-2655","BIT-java-2020-2655","BIT-java-min-2020-2655","BIT-jre-2020-2655","DEBIAN-CVE-2020-2655","DSA-4605-1","EUVD-2020-22448","GHSA-gf92-7rqx-hgfc","RHSA-2020:0122","RHSA-2020:0128","RHSA-2020:0232","SUSE-SU-2020:0140-1","SUSE-SU-2020:0213-1","UBUNTU-CVE-2020-2655","USN-4257-1","openSUSE-SU-2020:0113-1","openSUSE-SU-2024:10871-1","openSUSE-SU-2024:10872-1"],"status":"published","title":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that...","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","severity":{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.03613,"percentile":0.89587,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2020-01-15T16:34:05Z","modified":"2026-11-03T06:32:25Z","exploits":[{"source":"pocgithub","id":"RUB-NDS/CVE-2020-2655-DemoServer","title":"RUB-NDS/CVE-2020-2655-DemoServer","date":"2020-01-14","url":"https://github.com/RUB-NDS/CVE-2020-2655-DemoServer"}],"fixes":[{"ecosystem":"Alpine:v3.12","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk11","fixed_in":["11.0.6_p10-r0"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"openjdk-11","fixed_in":["11.0.6+10-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-lts","fixed_in":["11.0.6+10-1ubuntu1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","fixed_in":["11.0.6+10-1ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6_p10-r0"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"11.0.5"},{"last_affected":"11.0.5"},{"introduced":"13.0.1"},{"last_affected":"13.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"11.0.5"},{"last_affected":"11.0.5"},{"introduced":"13.0.1"},{"last_affected":"13.0.1"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"11.0.5"},{"last_affected":"11.0.5"},{"introduced":"13.0.1"},{"last_affected":"13.0.1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6+10-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"openjdk-11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6+10-1~deb10u1"}]}],"versions":["11.0.3+7-5","11.0.4+1-1","11.0.4+10-1","11.0.4+11-1","11.0.4+11-1~bpo9+1","11.0.4+11-1~deb10u1","11.0.4+2-1","11.0.4+4+really11.0.3+7-1","11.0.4+4+really11.0.3+7-2","11.0.4+4-1","11.0.4+6-1","11.0.4+8-1","11.0.4+9-1","11.0.5+10-1","11.0.5+10-1~bpo9+1","11.0.5+10-1~deb10u1","11.0.5+10-2","11.0.5+6-1","11.0.5+6-2","11.0.5+9-1","11.0.6+10-1~bpo9+1","11.0.6+7-1"],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-jmods-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"java-11-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-jmods-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"java-11-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-jmods-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"java-11-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-demo-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-devel-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-headless-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-javadoc-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-javadoc-zip-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-jmods-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"java-11-openjdk-src-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-1.el7_7"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-devel-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-headless-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-headless-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-javadoc-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-jmods","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-slowdebug-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.0::appstream","package":"java-11-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:11.0.6.10-0.el8_0"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6.0-3.6.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6.0-3.6.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6.0-3.39.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6.0-3.39.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6.0-3.39.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6.0-3.39.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6.0-3.39.2"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6.0-3.39.2"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6+10-1ubuntu1~18.04.1"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6+10-1ubuntu1"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u242-b08-0ubuntu3~16.04"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u242-b08-0ubuntu3~18.04"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1"],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6+10-1ubuntu1~18.04.1"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04"],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.6.0-lp151.3.12.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-11-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.12.0-3.1"}]}],"bundled":95},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-13-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.0.8.0-3.1"}]}],"bundled":95}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"oracle","product":"jdk"},{"vendor":"oracle","product":"jre"},{"vendor":"oracle corporation","product":"java"},{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","advisory","fix","report"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0128","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0122","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://www.debian.org/security/2020/dsa-4605","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://seclists.org/bugtraq/2020/Jan/24","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20200122-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0232","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","web","advisory"]},{"url":"https://usn.ubuntu.com/4257-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2655","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-gf92-7rqx-hgfc"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-2655","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-2655","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1790951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1791217","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0122.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2583","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2583","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2583","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2590","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2590","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2593","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2593","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2601","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2601","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2601","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2604","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2604","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2604","tags":["advisory"]},{"url":"https://www.oracle.com/technetwork/java/javase/11-0-6-oracle-relnotes-5813175.html","tags":["article"]},{"url":"https://www.oracle.com/technetwork/java/javase/13-0-2-relnotes-5812268.html","tags":["article"]},{"url":"https://www.oracle.com/technetwork/java/javase/8u241-relnotes-5813177.html","tags":["article"]},{"url":"https://www.oracle.com/technetwork/java/javaseproducts/documentation/javase7supportreleasenotes-1601161.html#R170_251","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2654","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2654","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-2655","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-2655","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0128.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0232.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200140-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1160968","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2654","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2655","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200213-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-2655","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4257-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-2583","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2590","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2593","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2601","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2604","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2654","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-2659","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UHEFQFKPZG5GKRDDYOMR6437UBEB7DVN/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3157","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2933","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2992","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14562","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-2830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2369","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-2388","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-2655","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2020-01-15T16:34:05Z","modified":"2024-09-30T15:59:08.148Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:51.206854Z"}],"euvd":[{"id":"EUVD-2020-22448","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2020-01-15T16:34:05Z","modified":"2024-09-30T15:59:08Z","cvss":[{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:28:02.932485Z"}],"ghsa":[{"id":"GHSA-gf92-7rqx-hgfc","title":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that...","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2022-05-24T17:06:38Z","modified":"2023-01-29T05:01:07Z","updated_at":"2026-11-02T14:44:44.497628Z"}],"nvd":[{"id":"CVE-2020-2655","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2020-01-15T17:15:24.097Z","modified":"2026-06-17T03:12:35.55Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:52.385274Z"}],"osv":[{"id":"ALPINE-CVE-2020-2655","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2020-01-15T17:15:24.097Z","modified":"2026-11-03T06:32:25.24257229Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"CVE-2020-2655","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2020-01-15T17:15:24.097Z","modified":"2026-05-08T07:56:29.627487398Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-2655","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2020-01-15T17:15:24.097Z","modified":"2026-08-27T13:03:11.010451939Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:33.729655Z"},{"id":"RHSA-2020:0122","title":"Red Hat Security Advisory: java-11-openjdk security update","status":"published","published":"2024-09-16T03:25:51Z","modified":"2026-06-29T10:28:24Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0128","title":"Red Hat Security Advisory: java-11-openjdk security update","status":"published","published":"2024-09-16T03:26:00Z","modified":"2026-06-29T10:28:26Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"RHSA-2020:0232","title":"Red Hat Security Advisory: java-11-openjdk security update","status":"published","published":"2024-09-16T03:26:09Z","modified":"2026-06-29T10:28:37Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.535721Z"},{"id":"UBUNTU-CVE-2020-2655","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2020-01-15T17:15:00Z","modified":"2026-02-04T04:39:20.161523Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"},{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"BIT-java-2020-2655","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2026-05-06T14:42:00.793Z","modified":"2026-09-08T08:48:23.575327677Z","updated_at":"2026-11-02T15:28:31.02759Z"},{"id":"BIT-java-min-2020-2655","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2026-05-06T14:42:03.002Z","modified":"2026-09-08T08:47:54.775517515Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2020-2655","description":"Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data as well as unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).","status":"published","published":"2026-05-08T05:43:27.139Z","modified":"2026-09-08T08:48:03.572777983Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"DSA-4605-1","title":"openjdk-11 - security update","status":"published","published":"2020-01-19T00:00:00Z","modified":"2026-03-09T02:11:27.779317Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2020:0113-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\nUpdate to version jdk-11.0.6-10 (January 2020 CPU, bsc#1160968)\n\nFixing these security related issues:\n\n- CVE-2020-2583: Unlink Set of LinkedHashSets\n- CVE-2020-2590: Improve Kerberos interop capabilities\n- CVE-2020-2593: Normalize normalization for all\n- CVE-2020-2601: Better Ticket Granting Services\n- CVE-2020-2604: Better serial filter handling\n- CVE-2020-2655: Better TLS messaging support\n- CVE-2020-2654: Improve Object Identifier Processing\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-01-28T05:12:52Z","modified":"2026-02-04T02:50:48.026862Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10871-1","title":"java-11-openjdk-11.0.12.0-3.1 on GA media","description":"These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:19.394894Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:10872-1","title":"java-13-openjdk-13.0.8.0-3.1 on GA media","description":"These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:43:55.885522Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:0140-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\nUpdate to version jdk-11.0.6-10 (January 2020 CPU, bsc#1160968)\n\nFixing these security related issues:\n\n- CVE-2020-2583: Unlink Set of LinkedHashSets\n- CVE-2020-2590: Improve Kerberos interop capabilities\n- CVE-2020-2593: Normalize normalization for all\n- CVE-2020-2601: Better Ticket Granting Services\n- CVE-2020-2604: Better serial filter handling\n- CVE-2020-2655: Better TLS messaging support\n- CVE-2020-2654: Improve Object Identifier Processing\n","status":"published","published":"2020-01-20T09:57:46Z","modified":"2026-02-04T04:31:20.36415Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2020:0213-1","title":"Security update for java-11-openjdk","description":"This update for java-11-openjdk fixes the following issues:\n\nUpdate to version jdk-11.0.6-10 (January 2020 CPU, bsc#1160968)\n\nFixing these security related issues:\n\n- CVE-2020-2583: Unlink Set of LinkedHashSets\n- CVE-2020-2590: Improve Kerberos interop capabilities\n- CVE-2020-2593: Normalize normalization for all\n- CVE-2020-2601: Better Ticket Granting Services\n- CVE-2020-2604: Better serial filter handling\n- CVE-2020-2655: Better TLS messaging support\n- CVE-2020-2654: Improve Object Identifier Processing\n","status":"published","published":"2020-01-22T14:38:36Z","modified":"2026-02-04T04:05:56.72638Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-4257-1","title":"openjdk-8, openjdk-lts vulnerabilities","description":"It was discovered that OpenJDK incorrectly handled exceptions during\ndeserialization in BeanContextSupport. An attacker could possibly use this\nissue to cause a denial of service or other unspecified impact.\n(CVE-2020-2583)\n\nIt was discovered that OpenJDK incorrectly validated properties of SASL\nmessages included in Kerberos GSSAPI. An unauthenticated remote attacker\nwith network access via Kerberos could possibly use this issue to insert,\nmodify or obtain sensitive information. (CVE-2020-2590)\n\nIt was discovered that OpenJDK incorrectly validated URLs. An attacker\ncould possibly use this issue to insert, edit or obtain sensitive\ninformation. (CVE-2020-2593)\n\nIt was discovered that OpenJDK Security component still used MD5 algorithm.\nA remote attacker could possibly use this issue to obtain sensitive\ninformation. (CVE-2020-2601)\n\nIt was discovered that OpenJDK incorrectly handled the application of\nserialization filters. An attacker could possibly use this issue to bypass the\nintended filter during serialization. (CVE-2020-2604)\n\nBo Zhang and Long Kuan discovered that OpenJDK incorrectly handled X.509\ncertificates. An attacker could possibly use this issue to cause a denial\nof service. (CVE-2020-2654)\n\nBengt Jonsson, Juraj Somorovsky, Kostis Sagonas, Paul Fiterau Brostean and\nRobert Merget discovered that OpenJDK incorrectly handled CertificateVerify\nTLS handshake messages. A remote attacker could possibly use this issue to\ninsert, edit or obtain sensitive information. This issue only affected\nOpenJDK 11. (CVE-2020-2655)\n\nIt was discovered that OpenJDK incorrectly enforced the limit of datagram\nsockets that can be created by a code running within a Java sandbox. An\nattacker could possibly use this issue to bypass the sandbox restrictions\ncausing a denial of service. This issue only affected OpenJDK 8.\n(CVE-2020-2659)\n","status":"published","published":"2020-01-28T20:03:55Z","modified":"2026-04-27T15:48:47.255661583Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}