CVE catalog

CVE-2020-2654

Security update for java-1_7_1-ibm

[CVE catalog]

Severity
Low · CVSS 3.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.96% · Oct 25, 2026

Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopenjdk-111111.0.6+10-1fixed
Susejava-1_7_0-ibmlinux enterprise point of sale 11 sp31.7.0_sr10.65-65.51.1fixed
Susejava-1_7_1-ibmhpe helion openstack 81.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmopenstack cloud 71.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmopenstack cloud 81.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmopenstack cloud crowbar 81.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server for sap applications 12 sp21.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server for sap applications 12 sp31.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise software development kit 12 sp41.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise software development kit 12 sp51.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server 12 sp2-ltss1.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server 12 sp2-bcl1.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server 12 sp3-ltss1.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server 12 sp3-bcl1.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server 12 sp41.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server for sap applications 12 sp41.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server 12 sp51.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server for sap applications 12 sp51.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmenterprise storage 51.7.1_sr4.65-38.53.1fixed
Susejava-1_7_1-ibmlinux enterprise server 11 sp4-ltss1.7.1_sr4.65-26.55.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopenjdk-11deb1111.0.6+10-1Not reportedDEBIAN-CVE-2020-2654Not reported
Susejava-1_7_0-ibmrpmlinux enterprise point of sale 11 sp31.7.0_sr10.65-65.51.1Not reportedSUSE-SU-2020:14391-1Not reported
Susejava-1_7_1-ibmrpmhpe helion openstack 81.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmopenstack cloud 71.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmopenstack cloud 81.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmopenstack cloud crowbar 81.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server for sap applications 12 sp21.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server for sap applications 12 sp31.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise software development kit 12 sp41.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise software development kit 12 sp51.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server 12 sp2-ltss1.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server 12 sp2-bcl1.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server 12 sp3-ltss1.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server 12 sp3-bcl1.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server 12 sp41.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server for sap applications 12 sp41.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server 12 sp51.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server for sap applications 12 sp51.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmenterprise storage 51.7.1_sr4.65-38.53.1Not reportedSUSE-SU-2020:1683-1Not reported
Susejava-1_7_1-ibmrpmlinux enterprise server 11 sp4-ltss1.7.1_sr4.65-26.55.1Not reportedSUSE-SU-2020:14398-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]