Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Oracle JRE Vulnerability - CVE-2020-14621 - Vulnerability Database
Oracle JRE

Oracle JRE Vulnerability - CVE-2020-14621

Medium
Reference: CVE-2020-14621
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-14621
Title: Oracle JRE Vulnerability
Overview:

Vulnerability in the Java SE Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261 8u251 11.0.7 and 14.0.1 Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of Java SE Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).