First published: Tue Oct 20 2020(Updated: )
An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact, and no availability impact.
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/java | <1.8.0-openjdk-1:1.8.0.272.b10-0.el6_10 | 1.8.0-openjdk-1:1.8.0.272.b10-0.el6_10 |
redhat/java | <11-openjdk-1:11.0.9.11-0.el7_9 | 11-openjdk-1:11.0.9.11-0.el7_9 |
redhat/java | <1.8.0-openjdk-1:1.8.0.272.b10-1.el7_9 | 1.8.0-openjdk-1:1.8.0.272.b10-1.el7_9 |
redhat/java | <1.8.0-ibm-1:1.8.0.6.20-1jpp.1.el7 | 1.8.0-ibm-1:1.8.0.6.20-1jpp.1.el7 |
redhat/java | <1.7.1-ibm-1:1.7.1.4.75-1jpp.1.el7 | 1.7.1-ibm-1:1.7.1.4.75-1jpp.1.el7 |
redhat/java | <11-openjdk-1:11.0.9.11-0.el8_2 | 11-openjdk-1:11.0.9.11-0.el8_2 |
redhat/java | <1.8.0-openjdk-1:1.8.0.272.b10-1.el8_2 | 1.8.0-openjdk-1:1.8.0.272.b10-1.el8_2 |
redhat/java | <1.8.0-ibm-1:1.8.0.6.20-1.el8_3 | 1.8.0-ibm-1:1.8.0.6.20-1.el8_3 |
redhat/java | <11-openjdk-1:11.0.9.11-0.el8_0 | 11-openjdk-1:11.0.9.11-0.el8_0 |
redhat/java | <1.8.0-openjdk-1:1.8.0.272.b10-0.el8_0 | 1.8.0-openjdk-1:1.8.0.272.b10-0.el8_0 |
redhat/java | <11-openjdk-1:11.0.9.11-0.el8_1 | 11-openjdk-1:11.0.9.11-0.el8_1 |
redhat/java | <1.8.0-openjdk-1:1.8.0.272.b10-0.el8_1 | 1.8.0-openjdk-1:1.8.0.272.b10-0.el8_1 |
debian/openjdk-11 | 11.0.16+8-1~deb10u1 11.0.20+8-1~deb10u1 11.0.20+8-1~deb11u1 11.0.21+9-1 | |
debian/openjdk-8 | 8u382-ga-2 | |
IBM Cloud Pak for Automation | <=20.0.3-IF002 | |
IBM Cloud Pak for Automation | <=21.0.1 | |
Oracle JDK | =1.7.0-update271 | |
Oracle JDK | =1.8.0-update261 | |
Oracle JDK | =11.0.8 | |
Oracle JDK | =15 | |
Oracle JRE | =1.8.0-update261 | |
NetApp 7-Mode Transition Tool | ||
Netapp Active Iq Unified Manager Windows | >=7.3 | |
Netapp Active Iq Unified Manager Vmware Vsphere | >=9.5 | |
NetApp E-Series SANtricity OS Controller | >=11.0.0<=11.60.1 | |
Netapp E-series Santricity Storage Manager | ||
Netapp E-series Santricity Web Services Proxy | ||
Netapp Hci Management Node | ||
NetApp OnCommand Insight | ||
Netapp Oncommand Unified Manager | ||
Netapp Santricity Cloud Connector | ||
Netapp Santricity Unified Manager | ||
Netapp Snapmanager Oracle | ||
Netapp Snapmanager Sap | ||
Netapp Solidfire | ||
Netapp Hci Storage Node | ||
openSUSE Leap | =15.2 | |
Debian Debian Linux | =9.0 | |
Debian Debian Linux | =10.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
CVE-2020-14797 is an unspecified vulnerability in Java SE related to the Libraries component.
Java SE versions 7u271, 8u261, 11.0.8, and 15 are affected by CVE-2020-14797.
CVE-2020-14797 is a difficult to exploit vulnerability that allows an unauthenticated attacker with network access.
CVE-2020-14797 has a severity of medium (3.7).
You can find more information about CVE-2020-14797 at the following references: [Link 1](https://www.oracle.com/security-alerts/cpuoct2020.html#AppendixJAVA), [Link 2](https://access.redhat.com/errata/RHSA-2020:4306), [Link 3](https://access.redhat.com/errata/RHSA-2020:4305).