All vulnerabilities

Servers and applications

CVE-2020-2778

Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: Applies to…

Severity
Low 3.7
Published
15 Apr 2020
Last changed
17 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:jdk
  • Version 11.0.6
  • Version 14.0.0
JavaServers and applications · cpe:a:oracle:jre
  • Version 11.0.6
  • Version 14.0.0
JavaServers and applications · cpe:a:oracle:openjdk
  • Version 14
  • From 13 up to 13.0.2
  • From 11 up to 11.0.6
  • Version 8-update241
All 92 release lines
  • Version 7
  • Version 7-update1
  • Version 7-update2
  • Version 7-update3
  • Version 7-update4
  • Version 7-update5
  • Version 7-update6
  • Version 7-update7
  • Version 7-update9
  • Version 7-update10
  • Version 7-update11
  • Version 7-update13
  • Version 7-update15
  • Version 7-update17
  • Version 7-update21
  • Version 7-update25
  • Version 7-update40
  • Version 7-update45
  • Version 7-update51
  • Version 7-update55
  • Version 7-update60
  • Version 7-update65
  • Version 7-update67
  • Version 7-update72
  • Version 7-update76
  • Version 7-update80
  • Version 7-update85
  • Version 7-update91
  • Version 7-update95
  • Version 7-update97
  • Version 7-update99
  • Version 7-update101
  • Version 7-update111
  • Version 7-update121
  • Version 7-update131
  • Version 7-update141
  • Version 7-update151
  • Version 7-update161
  • Version 7-update171
  • Version 7-update181
  • Version 7-update191
  • Version 7-update201
  • Version 7-update211
  • Version 7-update221
  • Version 7-update231
  • Version 7-update241
  • Version 7-update251
  • Version 8
  • Version 8-update5
  • Version 8-update11
  • Version 8-update20
  • Version 8-update25
  • Version 8-update31
  • Version 8-update40
  • Version 8-update45
  • Version 8-update51
  • Version 8-update60
  • Version 8-update65
  • Version 8-update66
  • Version 8-update71
  • Version 8-update72
  • Version 8-update73
  • Version 8-update74
  • Version 8-update77
  • Version 8-update91
  • Version 8-update92
  • Version 8-update101
  • Version 8-update102
  • Version 8-update111
  • Version 8-update112
  • Version 8-update121
  • Version 8-update131
  • Version 8-update141
  • Version 8-update151
  • Version 8-update152
  • Version 8-update161
  • Version 8-update162
  • Version 8-update171
  • Version 8-update172
  • Version 8-update181
  • Version 8-update191
  • Version 8-update192
  • Version 8-update201
  • Version 8-update202
  • Version 8-update211
  • Version 8-update212
  • Version 8-update221
  • Version 8-update231
  • Version 8-update241
  • From 11 up to 11.0.6
  • From 13 up to 13.0.2
  • Version 14

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-2778
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-2778