Red Hat Security AdvisoryRHSA-2020:1514
java-11-openjdk security update
Released 2020-04-21 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) java-11-openjdk-1:11.0.7.10-1.el8_1, java-11-openjdk-demo-1:11.0.7.10-1.el8_1, java-11-openjdk-devel-1:11.0.7.10-1.el8_1 +5
Fixes 13 records
Priority MEDIUM 47
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.0623 · Published 2020-04-15 · Partial fix
Priority MEDIUM 45
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.04051 · Published 2020-04-15 · Partial fix
Priority MEDIUM 44
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02766 · Published 2020-04-15 · Fixed
Priority LOW 38
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.04948 · Published 2020-04-15 · Partial fix
Priority LOW 38
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE).
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.04948 · Published 2020-04-15 · Partial fix
Priority LOW 27
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.02879 · Published 2020-04-15 · Partial fix
Priority LOW 26
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.02161 · Published 2020-04-15 · Fixed
Priority LOW 25
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.04246 · Published 2020-04-15 · Partial fix CWE-502
Priority LOW 25
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.04246 · Published 2020-04-15 · Partial fix CWE-502
Priority LOW 25
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.04162 · Published 2020-04-15 · Partial fix
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03884 · Published 2020-04-15 · Partial fix
Priority LOW 24
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.03931 · Published 2020-04-15 · Partial fix
Priority LOW 22
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.02356 · Published 2020-04-15 · Fixed
THREATIST.IORead the docs