VDB
BDU:2020-02548
BDU:2020-02548
PUBLISHED
CVSS 8.300000190734863 HIGH
Уязвимость компонента Libraries программных платформ Java SE и Java SE Embedded, позволяющая нарушителю получить полный контроль над приложением
Risk Scores
CVSS 3.0
8.300000190734863
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., АО «Концерн ВНИИНС» | GraalVM Enterprise Edition, Java SE, Java SE Embedded, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) | |
| Oracle Corporation | Java | Java SE: 7u251, 8u241, 11.0.6, 14, Java SE Embedded: 8u241 |
Timeline
- Apr 15, 2020 CVE Published
- Nov 21, 2023 CVE Updated
- Apr 28, 2026 Distribution Patch
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Distribution Patch
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
- Apr 28, 2026 Security Advisory
References
- https://security.netapp.com/advisory/ntap-20200416-0004/ url
- DSA-4662 vendor-advisory
- [debian-lts-announce] 20200429 [SECURITY] [DLA 2193-1] openjdk-7 security update mailing-list
- openSUSE-SU-2020:0800 vendor-advisory
- GLSA-202006-22 vendor-advisory
- USN-4337-1 vendor-advisory
- DSA-4668 vendor-advisory
- FEDORA-2020-5386fe3bbb vendor-advisory
- FEDORA-2020-21ca991b3b vendor-advisory
- FEDORA-2020-a60ad9d4ec vendor-advisory
- openSUSE-SU-2020:0757 vendor-advisory
- openSUSE-SU-2020:0841 vendor-advisory
- GLSA-202209-15 vendor-advisory
- https://www.oracle.com/security-alerts/cpuapr2020.html url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url