{"schema_version":"1.7.5","id":"CVE-2020-2604","published":"2020-01-15T17:15:20.487Z","modified":"2026-07-08T07:34:14.036808580Z","aliases":["BIT-java-2020-2604","BIT-java-min-2020-2604","BIT-jre-2020-2604"],"related":["CGA-3cf6-mj2m-5xg4","SUSE-SU-2020:0140-1","SUSE-SU-2020:0213-1","SUSE-SU-2020:0231-1","SUSE-SU-2020:0261-1","SUSE-SU-2020:0456-1","SUSE-SU-2020:0466-1","SUSE-SU-2020:0528-1","SUSE-SU-2020:0628-1","SUSE-SU-2020:14286-1","SUSE-SU-2020:14287-1","openSUSE-SU-2020:0113-1","openSUSE-SU-2020:0147-1","openSUSE-SU-2024:10871-1","openSUSE-SU-2024:10872-1","openSUSE-SU-2024:10876-1"],"details":"Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS v3.0 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).","affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/graalvm/graalvm-ce-builds","events":[{"introduced":"e57b8d283fb4de49639b22adcb9aad31baaa6352"},{"last_affected":"e57b8d283fb4de49639b22adcb9aad31baaa6352"}],"database_specific":{"cpe":"cpe:2.3:a:oracle:graalvm:19.3.0.2:*:*:*:enterprise:*:*:*","extracted_events":[{"introduced":"19.3.0.2"},{"last_affected":"19.3.0.2"}],"source":"CPE_STRING"}}],"versions":["19.3.0.2","vm-19.3.0.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2604.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openjdk/jdk","events":[{"introduced":"13ad3ed8b99f8c872eebb5d0bb647d5bb44ea0b5"},{"last_affected":"22e500e3a917594cd93baaf8b5c7d29360d250d1"}],"database_specific":{"cpe":["cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7-update80"},{"last_affected":"7-update80"},{"introduced":"7-update85"},{"last_affected":"7-update85"},{"introduced":"8-update102"},{"last_affected":"8-update102"},{"introduced":"8-update112"},{"last_affected":"8-update112"},{"introduced":"8-update20"},{"last_affected":"8-update20"},{"introduced":"8-update40"},{"last_affected":"8-update40"},{"introduced":"8-update60"},{"last_affected":"8-update60"},{"introduced":"8-update66"},{"last_affected":"8-update66"},{"introduced":"8-update72"},{"last_affected":"8-update72"},{"introduced":"8-update92"},{"last_affected":"8-update92"}],"source":"CPE_STRING"}}],"versions":["7-update80","7-update85","8-update102","8-update112","8-update20","8-update40","8-update60","8-update66","8-update72","8-update92","jdk8-b92","jdk8-b91","jdk8-b90","jdk8-b89","jdk8-b88","jdk8-b87","jdk8-b86","jdk8-b85","jdk8-b84","jdk8-b83","jdk8-b82","jdk8-b81","jdk8-b80","jdk8-b79","jdk8-b78","jdk8-b74","jdk8-b73","jdk8-b72","jdk8-b71","jdk8-b70","jdk8-b69","jdk8-b68","jdk8-b67","jdk8-b66","jdk8-b65","jdk8-b64","jdk8-b63","jdk8-b62","jdk8-b61","jdk8-b60","jdk8-b59","jdk8-b58","jdk8-b57","jdk8-b56","jdk8-b52","jdk8-b50","jdk8-b49","jdk8-b46","jdk8-b45","jdk8-b44","jdk8-b43","jdk8-b42","jdk8-b41","jdk8-b40","jdk8-b39","jdk8-b38","jdk8-b37","jdk8-b36","jdk8-b35","jdk8-b34","jdk8-b33","jdk8-b32","jdk8-b31","jdk8-b30","jdk8-b29","jdk8-b28","jdk8-b27","jdk8-b26","jdk8-b25","jdk8-b24","jdk8-b23","jdk8-b22","jdk8-b21","jdk8-b20","jdk8-b19","jdk8-b18","jdk8-b16","jdk8-b15","jdk8-b01","jdk7-b143","jdk7-b141","jdk7-b140","jdk7-b139","jdk7-b138","jdk7-b137","jdk7-b136","jdk7-b135","jdk7-b134","jdk7-b133","jdk7-b132","jdk7-b131","jdk7-b130","jdk7-b129","jdk7-b128","jdk7-b127","jdk7-b126","jdk7-b125","jdk7-b124","jdk7-b123","jdk7-b122","jdk7-b121","jdk7-b120","jdk7-b108","jdk7-b107","jdk7-b106","jdk7-b105","jdk7-b104","jdk7-b103","jdk7-b102","jdk7-b101","jdk7-b100","jdk7-b99","jdk7-b98","jdk7-b97","jdk7-b96","jdk7-b95","jdk7-b94","jdk7-b93","jdk7-b92","jdk7-b91","jdk7-b90","jdk7-b89","jdk7-b88","jdk7-b87","jdk7-b86","jdk7-b85","jdk7-b84","jdk7-b83","jdk7-b82","jdk7-b81","jdk7-b80"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2604.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openjdk/jdk15u","events":[{"introduced":"13ad3ed8b99f8c872eebb5d0bb647d5bb44ea0b5"},{"last_affected":"22e500e3a917594cd93baaf8b5c7d29360d250d1"}],"database_specific":{"cpe":["cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7-update80"},{"last_affected":"7-update80"},{"introduced":"7-update85"},{"last_affected":"7-update85"},{"introduced":"8-update102"},{"last_affected":"8-update102"},{"introduced":"8-update112"},{"last_affected":"8-update112"},{"introduced":"8-update20"},{"last_affected":"8-update20"},{"introduced":"8-update40"},{"last_affected":"8-update40"},{"introduced":"8-update60"},{"last_affected":"8-update60"},{"introduced":"8-update66"},{"last_affected":"8-update66"},{"introduced":"8-update72"},{"last_affected":"8-update72"},{"introduced":"8-update92"},{"last_affected":"8-update92"}],"source":"CPE_STRING"}}],"versions":["7-update80","7-update85","8-update102","8-update112","8-update20","8-update40","8-update60","8-update66","8-update72","8-update92","jdk8-b92","jdk8-b91","jdk8-b90","jdk8-b89","jdk8-b88","jdk8-b87","jdk8-b86","jdk8-b85","jdk8-b84","jdk8-b83","jdk8-b82","jdk8-b81","jdk8-b80","jdk8-b79","jdk8-b78","jdk8-b74","jdk8-b73","jdk8-b72","jdk8-b71","jdk8-b70","jdk8-b69","jdk8-b68","jdk8-b67","jdk8-b66","jdk8-b65","jdk8-b64","jdk8-b63","jdk8-b62","jdk8-b61","jdk8-b60","jdk8-b59","jdk8-b58","jdk8-b57","jdk8-b56","jdk8-b52","jdk8-b50","jdk8-b49","jdk8-b46","jdk8-b45","jdk8-b44","jdk8-b43","jdk8-b42","jdk8-b41","jdk8-b40","jdk8-b39","jdk8-b38","jdk8-b37","jdk8-b36","jdk8-b35","jdk8-b34","jdk8-b33","jdk8-b32","jdk8-b31","jdk8-b30","jdk8-b29","jdk8-b28","jdk8-b27","jdk8-b26","jdk8-b25","jdk8-b24","jdk8-b23","jdk8-b22","jdk8-b21","jdk8-b20","jdk8-b19","jdk8-b18","jdk8-b16","jdk8-b15","jdk8-b01","jdk7-b143","jdk7-b141","jdk7-b140","jdk7-b139","jdk7-b138","jdk7-b137","jdk7-b136","jdk7-b135","jdk7-b134","jdk7-b133","jdk7-b132","jdk7-b131","jdk7-b130","jdk7-b129","jdk7-b128","jdk7-b127","jdk7-b126","jdk7-b125","jdk7-b124","jdk7-b123","jdk7-b122","jdk7-b121","jdk7-b120","jdk7-b108","jdk7-b107","jdk7-b106","jdk7-b105","jdk7-b104","jdk7-b103","jdk7-b102","jdk7-b101","jdk7-b100","jdk7-b99","jdk7-b98","jdk7-b97","jdk7-b96","jdk7-b95","jdk7-b94","jdk7-b93","jdk7-b92","jdk7-b91","jdk7-b90","jdk7-b89","jdk7-b88","jdk7-b87","jdk7-b86","jdk7-b85","jdk7-b84","jdk7-b83","jdk7-b82","jdk7-b81","jdk7-b80"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2604.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/openjdk/jdk8u","events":[{"introduced":"13ad3ed8b99f8c872eebb5d0bb647d5bb44ea0b5"},{"last_affected":"22e500e3a917594cd93baaf8b5c7d29360d250d1"}],"database_specific":{"cpe":["cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7-update80"},{"last_affected":"7-update80"},{"introduced":"7-update85"},{"last_affected":"7-update85"},{"introduced":"8-update102"},{"last_affected":"8-update102"},{"introduced":"8-update112"},{"last_affected":"8-update112"},{"introduced":"8-update20"},{"last_affected":"8-update20"},{"introduced":"8-update40"},{"last_affected":"8-update40"},{"introduced":"8-update60"},{"last_affected":"8-update60"},{"introduced":"8-update66"},{"last_affected":"8-update66"},{"introduced":"8-update72"},{"last_affected":"8-update72"},{"introduced":"8-update92"},{"last_affected":"8-update92"}],"source":"CPE_STRING"}}],"versions":["7-update80","7-update85","8-update102","8-update112","8-update20","8-update40","8-update60","8-update66","8-update72","8-update92","jdk8-b92","jdk8-b91","jdk8-b90","jdk8-b89","jdk8-b88","jdk8-b87","jdk8-b86","jdk8-b85","jdk8-b84","jdk8-b83","jdk8-b82","jdk8-b81","jdk8-b80","jdk8-b79","jdk8-b78","jdk8-b74","jdk8-b73","jdk8-b72","jdk8-b71","jdk8-b70","jdk8-b69","jdk8-b68","jdk8-b67","jdk8-b66","jdk8-b65","jdk8-b64","jdk8-b63","jdk8-b62","jdk8-b61","jdk8-b60","jdk8-b59","jdk8-b58","jdk8-b57","jdk8-b56","jdk8-b52","jdk8-b50","jdk8-b49","jdk8-b46","jdk8-b45","jdk8-b44","jdk8-b43","jdk8-b42","jdk8-b41","jdk8-b40","jdk8-b39","jdk8-b38","jdk8-b37","jdk8-b36","jdk8-b35","jdk8-b34","jdk8-b33","jdk8-b32","jdk8-b31","jdk8-b30","jdk8-b29","jdk8-b28","jdk8-b27","jdk8-b26","jdk8-b25","jdk8-b24","jdk8-b23","jdk8-b22","jdk8-b21","jdk8-b20","jdk8-b19","jdk8-b18","jdk8-b16","jdk8-b15","jdk8-b01","jdk7-b143","jdk7-b141","jdk7-b140","jdk7-b139","jdk7-b138","jdk7-b137","jdk7-b136","jdk7-b135","jdk7-b134","jdk7-b133","jdk7-b132","jdk7-b131","jdk7-b130","jdk7-b129","jdk7-b128","jdk7-b127","jdk7-b126","jdk7-b125","jdk7-b124","jdk7-b123","jdk7-b122","jdk7-b121","jdk7-b120","jdk7-b108","jdk7-b107","jdk7-b106","jdk7-b105","jdk7-b104","jdk7-b103","jdk7-b102","jdk7-b101","jdk7-b100","jdk7-b99","jdk7-b98","jdk7-b97","jdk7-b96","jdk7-b95","jdk7-b94","jdk7-b93","jdk7-b92","jdk7-b91","jdk7-b90","jdk7-b89","jdk7-b88","jdk7-b87","jdk7-b86","jdk7-b85","jdk7-b84","jdk7-b83","jdk7-b82","jdk7-b81","jdk7-b80"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2604.json"}}],"references":[{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00050.html"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00060.html"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0122"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0128"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0196"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0202"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0231"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0232"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0465"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0467"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0468"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0469"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0470"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0541"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2020:0632"},{"type":"ADVISORY","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10315"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202101-19"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20200122-0003/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4257-1/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2020/dsa-4621"},{"type":"REPORT","url":"https://seclists.org/bugtraq/2020/Feb/22"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpujan2020.html"},{"type":"FIX","url":"https://www.oracle.com/security-alerts/cpujul2021.html"}],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*","cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*"],"extracted_events":[{"introduced":"7.3"},{"introduced":"9.5"}],"source":"CPE_RANGE","vendor_product":"netapp:active_iq_unified_manager"},{"cpes":["cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.0.0"},{"last_affected":"11.60.1"}],"source":"CPE_RANGE","vendor_product":"netapp:e-series_santricity_os_controller"},{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11"},{"last_affected":"11.0.5"},{"introduced":"11"},{"last_affected":"11.0.5"},{"introduced":"11"},{"last_affected":"11.0.5"},{"introduced":"13"},{"last_affected":"13.0.1"},{"introduced":"13"},{"last_affected":"13.0.1"},{"introduced":"13"},{"last_affected":"13.0.1"}],"source":"CPE_RANGE","vendor_product":"oracle:openjdk"},{"cpes":["cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"16.04"},{"last_affected":"16.04"},{"introduced":"18.04"},{"last_affected":"18.04"},{"introduced":"19.10"},{"last_affected":"19.10"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux"},{"cpes":["cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"},{"introduced":"9.0"},{"last_affected":"9.0"}],"source":"CPE_STRING","vendor_product":"debian:debian_linux"},{"cpes":["cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*","cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*","cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*","cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*","cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*","cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*","cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*","cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*","cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.9.0"},{"last_affected":"5.9.0"},{"introduced":"5.9.1"},{"last_affected":"5.9.1"},{"introduced":"5.10.0-NA"},{"last_affected":"5.10.0-NA"},{"introduced":"5.10.0-update_1"},{"last_affected":"5.10.0-update_1"},{"introduced":"5.10.0-update_2"},{"last_affected":"5.10.0-update_2"},{"introduced":"5.10.0-update_3"},{"last_affected":"5.10.0-update_3"},{"introduced":"5.10.0-update_4"},{"last_affected":"5.10.0-update_4"},{"introduced":"5.10.0-update_5"},{"last_affected":"5.10.0-update_5"},{"introduced":"5.10.0-update_6"},{"last_affected":"5.10.0-update_6"}],"source":"CPE_STRING","vendor_product":"mcafee:epolicy_orchestrator"},{"cpes":["cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"15.1"},{"last_affected":"15.1"}],"source":"CPE_STRING","vendor_product":"opensuse:leap"},{"cpes":["cpe:2.3:a:oracle:commerce_experience_manager:11.3.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.3.2"},{"last_affected":"11.3.2"}],"source":"CPE_STRING","vendor_product":"oracle:commerce_experience_manager"},{"cpes":["cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"11.3.2"},{"last_affected":"11.3.2"}],"source":"CPE_STRING","vendor_product":"oracle:commerce_guided_search"},{"cpes":["cpe:2.3:a:oracle:jdk:1.7.0:update241:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:1.8.0:update231:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:11.0.5:*:*:*:*:*:*:*","cpe:2.3:a:oracle:jdk:13.0.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.7.0-update241"},{"last_affected":"1.7.0-update241"},{"introduced":"1.8.0-update231"},{"last_affected":"1.8.0-update231"},{"introduced":"11.0.5"},{"last_affected":"11.0.5"},{"introduced":"13.0.1"},{"last_affected":"13.0.1"}],"source":"CPE_STRING","vendor_product":"oracle:jdk"},{"cpes":["cpe:2.3:a:oracle:jre:1.8.0:update231:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.8.0-update231"},{"last_affected":"1.8.0-update231"}],"source":"CPE_STRING","vendor_product":"oracle:jre"},{"cpes":["cpe:2.3:a:oracle:openjdk:7:-:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:7:update241:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7-NA"},{"last_affected":"7-NA"},{"introduced":"7-NA"},{"last_affected":"7-NA"},{"introduced":"7-NA"},{"last_affected":"7-NA"},{"introduced":"7-update241"},{"last_affected":"7-update241"},{"introduced":"7-update241"},{"last_affected":"7-update241"},{"introduced":"7-update241"},{"last_affected":"7-update241"},{"introduced":"8-NA"},{"last_affected":"8-NA"},{"introduced":"8-NA"},{"last_affected":"8-NA"},{"introduced":"8-NA"},{"last_affected":"8-NA"},{"introduced":"8-update152"},{"last_affected":"8-update152"},{"introduced":"8-update152"},{"last_affected":"8-update152"},{"introduced":"8-update152"},{"last_affected":"8-update152"},{"introduced":"8-update162"},{"last_affected":"8-update162"},{"introduced":"8-update162"},{"last_affected":"8-update162"},{"introduced":"8-update162"},{"last_affected":"8-update162"},{"introduced":"8-update172"},{"last_affected":"8-update172"},{"introduced":"8-update172"},{"last_affected":"8-update172"},{"introduced":"8-update172"},{"last_affected":"8-update172"},{"introduced":"8-update192"},{"last_affected":"8-update192"},{"introduced":"8-update192"},{"last_affected":"8-update192"},{"introduced":"8-update192"},{"last_affected":"8-update192"},{"introduced":"8-update202"},{"last_affected":"8-update202"},{"introduced":"8-update202"},{"last_affected":"8-update202"},{"introduced":"8-update202"},{"last_affected":"8-update202"},{"introduced":"8-update212"},{"last_affected":"8-update212"},{"introduced":"8-update212"},{"last_affected":"8-update212"},{"introduced":"8-update212"},{"last_affected":"8-update212"},{"introduced":"8-update222"},{"last_affected":"8-update222"},{"introduced":"8-update222"},{"last_affected":"8-update222"},{"introduced":"8-update222"},{"last_affected":"8-update222"},{"introduced":"8-update232"},{"last_affected":"8-update232"},{"introduced":"8-update232"},{"last_affected":"8-update232"},{"introduced":"8-update232"},{"last_affected":"8-update232"}],"source":"CPE_STRING","vendor_product":"oracle:openjdk"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"8.0"},{"last_affected":"8.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_desktop"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.7"},{"last_affected":"7.7"},{"introduced":"8.1"},{"last_affected":"8.1"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_eus"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.7"},{"last_affected":"7.7"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_aus"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.7"},{"last_affected":"7.7"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_server_tus"},{"cpes":["cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0"},{"last_affected":"6.0"},{"introduced":"7.0"},{"last_affected":"7.0"}],"source":"CPE_STRING","vendor_product":"redhat:enterprise_linux_workstation"}]},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}