CVE-2020-2585 — Corporation Java vulnerability

8 documents8 sources

Severity

5.9MEDIUMNVD

EPSS

1.2%

top 21.01%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Netapp E-series Santricity OS Controller Oracle Corporation Java Oracle JDK +1 more

Timeline

PublishedJan 15

Latest updateMay 24

Description

Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients…

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5oracle_corporation/javaJava SE: 8u231

▶NVDoracle/jdk1.8.0

▶NVDoracle/jre1.8.0

▶NVDnetapp/e-series_santricity_os_controller11.0 — 11.70.2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-4c7w-4j3f-pff5: Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX)↗2022-05-24

▶

CVEList

CVE-2020-2585: Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX)↗2020-01-15

▶

OSV

CVE-2020-2585: Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX)↗2020-01-15

▶

📋Vendor Advisories

Oracle

Oracle Oracle Java SE Risk Matrix: JavaFX — CVE-2020-2585↗2020-01-15

▶

Red Hat

JDK: unspecified vulnerability fixed in 8u221 (JavaFX)↗2020-01-14

▶

Debian

CVE-2020-2585: openjfx - Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The ...↗2020

▶

💬Community

Bugzilla

CVE-2020-2585 Oracle JDK: unspecified vulnerability fixed in 8u221 (JavaFX)↗2020-02-27

▶