Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. While the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N).
{
"unresolved_ranges": [
{
"vendor_product": "netapp:active_iq_unified_manager",
"cpes": [
"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*"
],
"extracted_events": [
{
"introduced": "7.3"
},
{
"introduced": "9.5"
}
],
"source": "CPE_RANGE"
},
{
"vendor_product": "netapp:e-series_santricity_os_controller",
"cpes": [
"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "11.0.0"
},
{
"last_affected": "11.60.3"
}
],
"source": "CPE_RANGE"
},
{
"vendor_product": "canonical:ubuntu_linux",
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "16.04"
},
{
"last_affected": "18.04"
},
{
"last_affected": "19.10"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "debian:debian_linux",
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "8.0"
},
{
"last_affected": "9.0"
},
{
"last_affected": "10.0"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "opensuse:leap",
"cpes": [
"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "15.1"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "oracle:jdk",
"cpes": [
"cpe:2.3:a:oracle:jdk:1.7.0:update241:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jdk:1.8.0:update231:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jdk:11.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jdk:13.0.1:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "1.7.0-update241"
},
{
"last_affected": "1.8.0-update231"
},
{
"last_affected": "11.0.5"
},
{
"last_affected": "13.0.1"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "oracle:jre",
"cpes": [
"cpe:2.3:a:oracle:jre:1.7.0:update_241:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jre:1.8.0:update_231:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jre:11.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jre:13.0.1:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "1.7.0-update_241"
},
{
"last_affected": "1.8.0-update_231"
},
{
"last_affected": "11.0.5"
},
{
"last_affected": "13.0.1"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "oracle:openjdk",
"cpes": [
"cpe:2.3:a:oracle:openjdk:11.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:13.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:7:-:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:7:update241:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "7-NA"
},
{
"last_affected": "7-NA"
},
{
"last_affected": "7-NA"
},
{
"last_affected": "7-update241"
},
{
"last_affected": "7-update241"
},
{
"last_affected": "7-update241"
},
{
"last_affected": "8-NA"
},
{
"last_affected": "8-NA"
},
{
"last_affected": "8-NA"
},
{
"last_affected": "8-update152"
},
{
"last_affected": "8-update152"
},
{
"last_affected": "8-update152"
},
{
"last_affected": "8-update162"
},
{
"last_affected": "8-update162"
},
{
"last_affected": "8-update162"
},
{
"last_affected": "8-update172"
},
{
"last_affected": "8-update172"
},
{
"last_affected": "8-update172"
},
{
"last_affected": "8-update192"
},
{
"last_affected": "8-update192"
},
{
"last_affected": "8-update192"
},
{
"last_affected": "8-update202"
},
{
"last_affected": "8-update202"
},
{
"last_affected": "8-update202"
},
{
"last_affected": "8-update212"
},
{
"last_affected": "8-update212"
},
{
"last_affected": "8-update212"
},
{
"last_affected": "8-update222"
},
{
"last_affected": "8-update222"
},
{
"last_affected": "8-update222"
},
{
"last_affected": "8-update232"
},
{
"last_affected": "8-update232"
},
{
"last_affected": "8-update232"
},
{
"last_affected": "11.0.1"
},
{
"last_affected": "11.0.1"
},
{
"last_affected": "11.0.1"
},
{
"last_affected": "11.0.2"
},
{
"last_affected": "11.0.2"
},
{
"last_affected": "11.0.2"
},
{
"last_affected": "11.0.3"
},
{
"last_affected": "11.0.3"
},
{
"last_affected": "11.0.3"
},
{
"last_affected": "11.0.4"
},
{
"last_affected": "11.0.4"
},
{
"last_affected": "11.0.4"
},
{
"last_affected": "11.0.5"
},
{
"last_affected": "11.0.5"
},
{
"last_affected": "11.0.5"
},
{
"last_affected": "13.0.1"
},
{
"last_affected": "13.0.1"
},
{
"last_affected": "13.0.1"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux_desktop",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "6.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux_eus",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "7.7"
},
{
"last_affected": "8.1"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux_server",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "6.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux_server_aus",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "7.7"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux_server_tus",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "7.7"
}
],
"source": "CPE_STRING"
},
{
"vendor_product": "redhat:enterprise_linux_workstation",
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"last_affected": "6.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}{
"cpe": [
"cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:13:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "7-update80"
},
{
"last_affected": "7-update85"
},
{
"last_affected": "8-update102"
},
{
"last_affected": "8-update112"
},
{
"last_affected": "8-update20"
},
{
"last_affected": "8-update40"
},
{
"last_affected": "8-update60"
},
{
"last_affected": "8-update66"
},
{
"last_affected": "8-update72"
},
{
"last_affected": "8-update92"
},
{
"last_affected": "11"
},
{
"last_affected": "13"
}
],
"source": "CPE_STRING"
}{
"cpe": [
"cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:13:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "7-update80"
},
{
"last_affected": "7-update85"
},
{
"last_affected": "8-update102"
},
{
"last_affected": "8-update112"
},
{
"last_affected": "8-update20"
},
{
"last_affected": "8-update40"
},
{
"last_affected": "8-update60"
},
{
"last_affected": "8-update66"
},
{
"last_affected": "8-update72"
},
{
"last_affected": "8-update92"
},
{
"last_affected": "11"
},
{
"last_affected": "13"
}
],
"source": "CPE_STRING"
}{
"cpe": [
"cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "7-update80"
},
{
"last_affected": "7-update85"
},
{
"last_affected": "8-update102"
},
{
"last_affected": "8-update112"
},
{
"last_affected": "8-update20"
},
{
"last_affected": "8-update40"
},
{
"last_affected": "8-update60"
},
{
"last_affected": "8-update66"
},
{
"last_affected": "8-update72"
},
{
"last_affected": "8-update92"
}
],
"source": "CPE_STRING"
}