Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
{
"unresolved_ranges": [
{
"cpe": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.10.0-NA"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.10.0-update_1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.10.0-update_2"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.10.0-update_3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.10.0-update_4"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.10.0-update_5"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.10.0-update_6"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.9.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "5.9.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
"extracted_events": [
{
"introduced": "9.5"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",
"extracted_events": [
{
"introduced": "7.3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "11.0.0"
},
{
"last_affected": "11.60.3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:jdk:1.7.0:update241:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "1.7.0-update241"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:jdk:1.8.0:update231:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "1.8.0-update231"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:jdk:11.0.5:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "11.0.5"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:jdk:13.0.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "13.0.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:jre:1.7.0:update_241:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "1.7.0-update_241"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:jre:1.8.0:update_231:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "1.8.0-update_231"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:jre:11.0.5:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "11.0.5"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:jre:13.0.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "13.0.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "11.0.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.2:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "11.0.2"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.3:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "11.0.3"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.4:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "11.0.4"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:11.0.5:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "11.0.5"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:13.0.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "13.0.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:7:-:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7-NA"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:7:update241:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7-update241"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8-NA"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8-update152"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8-update162"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8-update172"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8-update192"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8-update202"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8-update212"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8-update222"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8-update232"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"extracted_events": [
{
"last_affected": "16.04"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"extracted_events": [
{
"last_affected": "18.04"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "9.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "6.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.7"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "8.1"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "6.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.7"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.7"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "6.0"
}
],
"source": "CPE_FIELD"
},
{
"cpe": "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
"extracted_events": [
{
"last_affected": "7.0"
}
],
"source": "CPE_FIELD"
}
]
}{
"cpe": "cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "19.10"
}
],
"source": "CPE_FIELD"
}{
"cpe": [
"cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:13:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "7-update80"
},
{
"last_affected": "7-update85"
},
{
"last_affected": "8-update102"
},
{
"last_affected": "8-update112"
},
{
"last_affected": "8-update20"
},
{
"last_affected": "8-update40"
},
{
"last_affected": "8-update60"
},
{
"last_affected": "8-update66"
},
{
"last_affected": "8-update72"
},
{
"last_affected": "8-update92"
},
{
"last_affected": "11"
},
{
"last_affected": "13"
},
{
"last_affected": "10.0"
},
{
"last_affected": "15.1"
}
],
"source": "CPE_FIELD"
}