Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 26

Количество 26

ubuntu логотип

CVE-2020-14781

почти 6 лет назад

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS3: 3.7
EPSS: Низкий
redhat логотип

CVE-2020-14781

почти 6 лет назад

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2020-14781

почти 6 лет назад

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS3: 3.7
EPSS: Низкий
debian логотип

CVE-2020-14781

почти 6 лет назад

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java ...

CVSS3: 3.7
EPSS: Низкий
github логотип

GHSA-285p-hp2m-592x

около 4 лет назад

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS3: 3.7
EPSS: Низкий
fstec логотип

BDU:2020-05049

почти 6 лет назад

Уязвимость компонента JNDI программных платформ Java SE, Java SE Embedded, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 3.7
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0032-1

больше 5 лет назад

Security update for java-1_8_0-ibm

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2020:3932-1

больше 5 лет назад

Security update for java-1_8_0-ibm

EPSS: Низкий
oracle-oval логотип

ELSA-2020-4350

почти 6 лет назад

ELSA-2020-4350: java-1.8.0-openjdk security and bug fix update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2020-4348

почти 6 лет назад

ELSA-2020-4348: java-1.8.0-openjdk security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2020-4347

почти 6 лет назад

ELSA-2020-4347: java-1.8.0-openjdk security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2020-4307

почти 6 лет назад

ELSA-2020-4307: java-11-openjdk security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2020-4305

почти 6 лет назад

ELSA-2020-4305: java-11-openjdk security and bug fix update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2020:1994-1

больше 5 лет назад

Security update for java-11-openjdk

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2020:1984-1

больше 5 лет назад

Security update for java-11-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:0019-1

больше 5 лет назад

Security update for java-1_7_1-ibm

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2020:3359-1

больше 5 лет назад

Security update for java-11-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2020:3310-1

больше 5 лет назад

Security update for java-1_7_0-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2020:3159-1

почти 6 лет назад

Security update for java-11-openjdk

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2020:14588-1

больше 5 лет назад

Security update for java-1_7_1-ibm

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2020-14781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS3: 3.7
2%
Низкий
почти 6 лет назад
redhat логотип
CVE-2020-14781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS3: 3.7
2%
Низкий
почти 6 лет назад
nvd логотип
CVE-2020-14781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS3: 3.7
2%
Низкий
почти 6 лет назад
debian логотип
CVE-2020-14781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java ...

CVSS3: 3.7
2%
Низкий
почти 6 лет назад
github логотип
GHSA-285p-hp2m-592x

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

CVSS3: 3.7
2%
Низкий
около 4 лет назад
fstec логотип
BDU:2020-05049

Уязвимость компонента JNDI программных платформ Java SE, Java SE Embedded, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

CVSS3: 3.7
2%
Низкий
почти 6 лет назад
suse-cvrf логотип
SUSE-SU-2021:0032-1

Security update for java-1_8_0-ibm

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2020:3932-1

Security update for java-1_8_0-ibm

больше 5 лет назад
oracle-oval логотип
ELSA-2020-4350

ELSA-2020-4350: java-1.8.0-openjdk security and bug fix update (MODERATE)

почти 6 лет назад
oracle-oval логотип
ELSA-2020-4348

ELSA-2020-4348: java-1.8.0-openjdk security update (MODERATE)

почти 6 лет назад
oracle-oval логотип
ELSA-2020-4347

ELSA-2020-4347: java-1.8.0-openjdk security update (MODERATE)

почти 6 лет назад
oracle-oval логотип
ELSA-2020-4307

ELSA-2020-4307: java-11-openjdk security update (MODERATE)

почти 6 лет назад
oracle-oval логотип
ELSA-2020-4305

ELSA-2020-4305: java-11-openjdk security and bug fix update (MODERATE)

почти 6 лет назад
suse-cvrf логотип
openSUSE-SU-2020:1994-1

Security update for java-11-openjdk

больше 5 лет назад
suse-cvrf логотип
openSUSE-SU-2020:1984-1

Security update for java-11-openjdk

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2021:0019-1

Security update for java-1_7_1-ibm

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2020:3359-1

Security update for java-11-openjdk

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2020:3310-1

Security update for java-1_7_0-openjdk

больше 5 лет назад
suse-cvrf логотип
SUSE-SU-2020:3159-1

Security update for java-11-openjdk

почти 6 лет назад
suse-cvrf логотип
SUSE-SU-2020:14588-1

Security update for java-1_7_1-ibm

больше 5 лет назад

Уязвимостей на страницу

exploitDog - Комплексное решение для обнаружения, оценки и устранения уязвимостей.