Low
Security advisory
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-2590
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 07:40 UTC · Revision 1
Source evidence
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
osv:CVE-2020-2590
Complete source record
{
"id": "f4feba2d7bded498569a4d0cf5c1e9bd3a94febc3caf183bafe3107f590475dc",
"url": "https://osv.dev/vulnerability/CVE-2020-2590",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-2590",
"summary": "Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Kerberos to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).",
"evidence": "osv:CVE-2020-2590",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2020-2590",
"aliases": [
"BIT-java-2020-2590",
"BIT-java-min-2020-2590",
"BIT-jre-2020-2590",
"CVE-2020-2590"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/openjdk/jdk",
"type": "GIT",
"events": [
{
"introduced": "13ad3ed8b99f8c872eebb5d0bb647d5bb44ea0b5"
},
{
"last_affected": "d5914f18390f71c9bdc333f66cbee6164eb7f857"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*",
"range": [
{
"introduced": "7-update80"
},
{
"last_affected": "7-update80"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*",
"range": [
{
"introduced": "7-update85"
},
{
"last_affected": "7-update85"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update102"
},
{
"last_affected": "8-update102"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update112"
},
{
"last_affected": "8-update112"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update20"
},
{
"last_affected": "8-update20"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update40"
},
{
"last_affected": "8-update40"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update60"
},
{
"last_affected": "8-update60"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update66"
},
{
"last_affected": "8-update66"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update72"
},
{
"last_affected": "8-update72"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update92"
},
{
"last_affected": "8-update92"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "11"
},
{
"last_affected": "11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:13:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13"
},
{
"last_affected": "13"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"11",
"13",
"7-update80",
"7-update85",
"8-update102",
"8-update112",
"8-update20",
"8-update40",
"8-update60",
"8-update66",
"8-update72",
"8-update92",
"jdk-13-ga",
"jdk-13+33",
"jdk-13+32",
"jdk-13+31",
"jdk-13+30",
"jdk-13+27",
"jdk-13+26",
"jdk-14+0",
"jdk-13+25",
"jdk-12+0",
"jdk-10+24",
"jdk-10+23",
"jdk-10+22",
"jdk-10+21",
"jdk-10+20",
"jdk-9+156",
"jdk-9+155",
"jdk-9+154",
"jdk-9+153",
"jdk-9+152",
"jdk-9+151",
"jdk-9+150",
"jdk-9+149",
"jdk-9+148",
"jdk-9+147",
"jdk-9+146",
"jdk-9+145",
"jdk-9+144",
"jdk-9+143",
"jdk-9+142",
"jdk-9+141",
"jdk-9+140",
"jdk-9+139",
"jdk-9+138",
"jdk-9+137",
"jdk-9+136",
"jdk-9+135",
"jdk-9+134",
"jdk-9+133",
"jdk-9+132",
"jdk-9+131",
"jdk-9+130",
"jdk-9+129",
"jdk-9+128",
"jdk-9+127",
"jdk-9+124",
"jdk-9+123",
"jdk-9+122",
"jdk-9+121",
"jdk-9+120",
"jdk-9+119",
"jdk-9+118",
"jdk-9+117",
"jdk-9+116",
"jdk-9+115",
"jdk-9+114",
"jdk-9+113",
"jdk-9+112",
"jdk-9+111",
"jdk-9+110",
"jdk-9+109",
"jdk-9+108",
"jdk-9+107",
"jdk-9+106",
"jdk-9+105",
"jdk-9+104",
"jdk-9+103",
"jdk-9+102",
"jdk-9+101",
"jdk-9+100",
"jdk-9+99",
"jdk-9+98",
"jdk-9+97",
"jdk-9+96",
"jdk-9+95",
"jdk9-b94",
"jdk9-b92",
"jdk9-b91",
"jdk9-b90",
"jdk9-b89",
"jdk9-b88",
"jdk9-b87",
"jdk9-b86",
"jdk9-b85",
"jdk9-b84",
"jdk9-b83",
"jdk9-b82",
"jdk9-b81",
"jdk9-b80",
"jdk9-b79",
"jdk9-b78",
"jdk9-b77",
"jdk9-b76",
"jdk9-b75",
"jdk9-b74",
"jdk9-b73",
"jdk9-b72",
"jdk9-b71",
"jdk9-b70",
"jdk9-b69",
"jdk9-b68",
"jdk9-b67",
"jdk9-b66",
"jdk9-b65",
"jdk9-b64",
"jdk9-b63",
"jdk9-b62",
"jdk9-b61",
"jdk9-b60",
"jdk9-b59",
"jdk9-b58",
"jdk9-b57",
"jdk9-b56",
"jdk9-b55",
"jdk9-b54",
"jdk9-b53",
"jdk9-b52",
"jdk9-b51",
"jdk9-b50",
"jdk9-b49",
"jdk9-b48",
"jdk9-b47",
"jdk9-b46",
"jdk9-b45",
"jdk9-b44",
"jdk9-b43",
"jdk9-b42",
"jdk9-b41",
"jdk9-b40",
"jdk9-b39",
"jdk9-b38",
"jdk9-b37",
"jdk9-b36",
"jdk9-b35",
"jdk9-b34",
"jdk9-b33",
"jdk9-b32",
"jdk9-b31",
"jdk9-b30",
"jdk9-b27",
"jdk9-b26",
"jdk9-b25",
"jdk9-b24",
"jdk9-b23",
"jdk9-b21",
"jdk9-b20",
"jdk9-b19",
"jdk9-b18",
"jdk9-b17",
"jdk9-b16",
"jdk9-b15",
"jdk9-b14",
"jdk9-b13",
"jdk9-b12",
"jdk9-b11",
"jdk9-b10",
"jdk9-b08",
"jdk9-b07",
"jdk9-b06",
"jdk9-b05",
"jdk9-b04",
"jdk9-b01",
"jdk9-b00",
"jdk8-b120",
"jdk8-b119",
"jdk8-b55",
"jdk8-b54",
"jdk8-b53",
"jdk8-b52",
"jdk8-b50",
"jdk8-b49",
"jdk8-b46",
"jdk8-b45",
"jdk8-b44",
"jdk8-b43",
"jdk8-b42",
"jdk8-b41",
"jdk8-b40",
"jdk8-b39",
"jdk8-b38",
"jdk8-b37",
"jdk8-b36",
"jdk8-b35",
"jdk8-b34",
"jdk8-b33",
"jdk8-b32",
"jdk8-b31",
"jdk8-b30",
"jdk8-b29",
"jdk8-b28",
"jdk8-b27",
"jdk8-b26",
"jdk8-b25",
"jdk8-b24",
"jdk8-b23",
"jdk8-b22",
"jdk8-b21",
"jdk8-b20",
"jdk8-b19",
"jdk8-b18",
"jdk8-b16",
"jdk8-b15",
"jdk8-b01",
"jdk7-b143",
"jdk7-b141",
"jdk7-b140",
"jdk7-b139",
"jdk7-b138",
"jdk7-b137",
"jdk7-b136",
"jdk7-b135",
"jdk7-b134",
"jdk7-b133",
"jdk7-b132",
"jdk7-b131",
"jdk7-b130",
"jdk7-b129",
"jdk7-b128",
"jdk7-b127",
"jdk7-b126",
"jdk7-b125",
"jdk7-b124",
"jdk7-b123",
"jdk7-b122",
"jdk7-b121",
"jdk7-b120",
"jdk7-b108",
"jdk7-b107",
"jdk7-b106",
"jdk7-b105",
"jdk7-b104",
"jdk7-b103",
"jdk7-b102",
"jdk7-b101",
"jdk7-b100",
"jdk7-b99",
"jdk7-b98",
"jdk7-b97",
"jdk7-b96",
"jdk7-b95",
"jdk7-b94",
"jdk7-b93",
"jdk7-b92",
"jdk7-b91",
"jdk7-b90",
"jdk7-b89",
"jdk7-b88",
"jdk7-b87",
"jdk7-b86",
"jdk7-b85",
"jdk7-b84",
"jdk7-b83",
"jdk7-b82",
"jdk7-b81",
"jdk7-b80"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2590.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/openjdk/jdk15u",
"type": "GIT",
"events": [
{
"introduced": "13ad3ed8b99f8c872eebb5d0bb647d5bb44ea0b5"
},
{
"last_affected": "d5914f18390f71c9bdc333f66cbee6164eb7f857"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*",
"range": [
{
"introduced": "7-update80"
},
{
"last_affected": "7-update80"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*",
"range": [
{
"introduced": "7-update85"
},
{
"last_affected": "7-update85"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update102"
},
{
"last_affected": "8-update102"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update112"
},
{
"last_affected": "8-update112"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update20"
},
{
"last_affected": "8-update20"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update40"
},
{
"last_affected": "8-update40"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update60"
},
{
"last_affected": "8-update60"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update66"
},
{
"last_affected": "8-update66"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update72"
},
{
"last_affected": "8-update72"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update92"
},
{
"last_affected": "8-update92"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:11:*:*:*:*:*:*:*",
"range": [
{
"introduced": "11"
},
{
"last_affected": "11"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:13:*:*:*:*:*:*:*",
"range": [
{
"introduced": "13"
},
{
"last_affected": "13"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"11",
"13",
"7-update80",
"7-update85",
"8-update102",
"8-update112",
"8-update20",
"8-update40",
"8-update60",
"8-update66",
"8-update72",
"8-update92",
"jdk-13-ga",
"jdk-13+33",
"jdk-13+32",
"jdk-13+31",
"jdk-13+30",
"jdk-13+27",
"jdk-13+26",
"jdk-14+0",
"jdk-13+25",
"jdk-12+0",
"jdk-10+24",
"jdk-10+23",
"jdk-10+22",
"jdk-10+21",
"jdk-10+20",
"jdk-9+156",
"jdk-9+155",
"jdk-9+154",
"jdk-9+153",
"jdk-9+152",
"jdk-9+151",
"jdk-9+150",
"jdk-9+149",
"jdk-9+148",
"jdk-9+147",
"jdk-9+146",
"jdk-9+145",
"jdk-9+144",
"jdk-9+143",
"jdk-9+142",
"jdk-9+141",
"jdk-9+140",
"jdk-9+139",
"jdk-9+138",
"jdk-9+137",
"jdk-9+136",
"jdk-9+135",
"jdk-9+134",
"jdk-9+133",
"jdk-9+132",
"jdk-9+131",
"jdk-9+130",
"jdk-9+129",
"jdk-9+128",
"jdk-9+127",
"jdk-9+124",
"jdk-9+123",
"jdk-9+122",
"jdk-9+121",
"jdk-9+120",
"jdk-9+119",
"jdk-9+118",
"jdk-9+117",
"jdk-9+116",
"jdk-9+115",
"jdk-9+114",
"jdk-9+113",
"jdk-9+112",
"jdk-9+111",
"jdk-9+110",
"jdk-9+109",
"jdk-9+108",
"jdk-9+107",
"jdk-9+106",
"jdk-9+105",
"jdk-9+104",
"jdk-9+103",
"jdk-9+102",
"jdk-9+101",
"jdk-9+100",
"jdk-9+99",
"jdk-9+98",
"jdk-9+97",
"jdk-9+96",
"jdk-9+95",
"jdk9-b94",
"jdk9-b92",
"jdk9-b91",
"jdk9-b90",
"jdk9-b89",
"jdk9-b88",
"jdk9-b87",
"jdk9-b86",
"jdk9-b85",
"jdk9-b84",
"jdk9-b83",
"jdk9-b82",
"jdk9-b81",
"jdk9-b80",
"jdk9-b79",
"jdk9-b78",
"jdk9-b77",
"jdk9-b76",
"jdk9-b75",
"jdk9-b74",
"jdk9-b73",
"jdk9-b72",
"jdk9-b71",
"jdk9-b70",
"jdk9-b69",
"jdk9-b68",
"jdk9-b67",
"jdk9-b66",
"jdk9-b65",
"jdk9-b64",
"jdk9-b63",
"jdk9-b62",
"jdk9-b61",
"jdk9-b60",
"jdk9-b59",
"jdk9-b58",
"jdk9-b57",
"jdk9-b56",
"jdk9-b55",
"jdk9-b54",
"jdk9-b53",
"jdk9-b52",
"jdk9-b51",
"jdk9-b50",
"jdk9-b49",
"jdk9-b48",
"jdk9-b47",
"jdk9-b46",
"jdk9-b45",
"jdk9-b44",
"jdk9-b43",
"jdk9-b42",
"jdk9-b41",
"jdk9-b40",
"jdk9-b39",
"jdk9-b38",
"jdk9-b37",
"jdk9-b36",
"jdk9-b35",
"jdk9-b34",
"jdk9-b33",
"jdk9-b32",
"jdk9-b31",
"jdk9-b30",
"jdk9-b27",
"jdk9-b26",
"jdk9-b25",
"jdk9-b24",
"jdk9-b23",
"jdk9-b21",
"jdk9-b20",
"jdk9-b19",
"jdk9-b18",
"jdk9-b17",
"jdk9-b16",
"jdk9-b15",
"jdk9-b14",
"jdk9-b13",
"jdk9-b12",
"jdk9-b11",
"jdk9-b10",
"jdk9-b08",
"jdk9-b07",
"jdk9-b06",
"jdk9-b05",
"jdk9-b04",
"jdk9-b01",
"jdk9-b00",
"jdk8-b120",
"jdk8-b119",
"jdk8-b55",
"jdk8-b54",
"jdk8-b53",
"jdk8-b52",
"jdk8-b50",
"jdk8-b49",
"jdk8-b46",
"jdk8-b45",
"jdk8-b44",
"jdk8-b43",
"jdk8-b42",
"jdk8-b41",
"jdk8-b40",
"jdk8-b39",
"jdk8-b38",
"jdk8-b37",
"jdk8-b36",
"jdk8-b35",
"jdk8-b34",
"jdk8-b33",
"jdk8-b32",
"jdk8-b31",
"jdk8-b30",
"jdk8-b29",
"jdk8-b28",
"jdk8-b27",
"jdk8-b26",
"jdk8-b25",
"jdk8-b24",
"jdk8-b23",
"jdk8-b22",
"jdk8-b21",
"jdk8-b20",
"jdk8-b19",
"jdk8-b18",
"jdk8-b16",
"jdk8-b15",
"jdk8-b01",
"jdk7-b143",
"jdk7-b141",
"jdk7-b140",
"jdk7-b139",
"jdk7-b138",
"jdk7-b137",
"jdk7-b136",
"jdk7-b135",
"jdk7-b134",
"jdk7-b133",
"jdk7-b132",
"jdk7-b131",
"jdk7-b130",
"jdk7-b129",
"jdk7-b128",
"jdk7-b127",
"jdk7-b126",
"jdk7-b125",
"jdk7-b124",
"jdk7-b123",
"jdk7-b122",
"jdk7-b121",
"jdk7-b120",
"jdk7-b108",
"jdk7-b107",
"jdk7-b106",
"jdk7-b105",
"jdk7-b104",
"jdk7-b103",
"jdk7-b102",
"jdk7-b101",
"jdk7-b100",
"jdk7-b99",
"jdk7-b98",
"jdk7-b97",
"jdk7-b96",
"jdk7-b95",
"jdk7-b94",
"jdk7-b93",
"jdk7-b92",
"jdk7-b91",
"jdk7-b90",
"jdk7-b89",
"jdk7-b88",
"jdk7-b87",
"jdk7-b86",
"jdk7-b85",
"jdk7-b84",
"jdk7-b83",
"jdk7-b82",
"jdk7-b81",
"jdk7-b80"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2590.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/openjdk/jdk8u",
"type": "GIT",
"events": [
{
"introduced": "13ad3ed8b99f8c872eebb5d0bb647d5bb44ea0b5"
},
{
"last_affected": "22e500e3a917594cd93baaf8b5c7d29360d250d1"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*",
"range": [
{
"introduced": "7-update80"
},
{
"last_affected": "7-update80"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*",
"range": [
{
"introduced": "7-update85"
},
{
"last_affected": "7-update85"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update102"
},
{
"last_affected": "8-update102"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update112"
},
{
"last_affected": "8-update112"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update20"
},
{
"last_affected": "8-update20"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update40"
},
{
"last_affected": "8-update40"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update60"
},
{
"last_affected": "8-update60"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update66"
},
{
"last_affected": "8-update66"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update72"
},
{
"last_affected": "8-update72"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
"range": [
{
"introduced": "8-update92"
},
{
"last_affected": "8-update92"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"7-update80",
"7-update85",
"8-update102",
"8-update112",
"8-update20",
"8-update40",
"8-update60",
"8-update66",
"8-update72",
"8-update92",
"jdk8-b92",
"jdk8-b91",
"jdk8-b90",
"jdk8-b89",
"jdk8-b88",
"jdk8-b87",
"jdk8-b86",
"jdk8-b85",
"jdk8-b84",
"jdk8-b83",
"jdk8-b82",
"jdk8-b81",
"jdk8-b80",
"jdk8-b79",
"jdk8-b78",
"jdk8-b74",
"jdk8-b73",
"jdk8-b72",
"jdk8-b71",
"jdk8-b70",
"jdk8-b69",
"jdk8-b68",
"jdk8-b67",
"jdk8-b66",
"jdk8-b65",
"jdk8-b64",
"jdk8-b63",
"jdk8-b62",
"jdk8-b61",
"jdk8-b60",
"jdk8-b59",
"jdk8-b58",
"jdk8-b57",
"jdk8-b56",
"jdk8-b52",
"jdk8-b50",
"jdk8-b49",
"jdk8-b46",
"jdk8-b45",
"jdk8-b44",
"jdk8-b43",
"jdk8-b42",
"jdk8-b41",
"jdk8-b40",
"jdk8-b39",
"jdk8-b38",
"jdk8-b37",
"jdk8-b36",
"jdk8-b35",
"jdk8-b34",
"jdk8-b33",
"jdk8-b32",
"jdk8-b31",
"jdk8-b30",
"jdk8-b29",
"jdk8-b28",
"jdk8-b27",
"jdk8-b26",
"jdk8-b25",
"jdk8-b24",
"jdk8-b23",
"jdk8-b22",
"jdk8-b21",
"jdk8-b20",
"jdk8-b19",
"jdk8-b18",
"jdk8-b16",
"jdk8-b15",
"jdk8-b01",
"jdk7-b143",
"jdk7-b141",
"jdk7-b140",
"jdk7-b139",
"jdk7-b138",
"jdk7-b137",
"jdk7-b136",
"jdk7-b135",
"jdk7-b134",
"jdk7-b133",
"jdk7-b132",
"jdk7-b131",
"jdk7-b130",
"jdk7-b129",
"jdk7-b128",
"jdk7-b127",
"jdk7-b126",
"jdk7-b125",
"jdk7-b124",
"jdk7-b123",
"jdk7-b122",
"jdk7-b121",
"jdk7-b120",
"jdk7-b108",
"jdk7-b107",
"jdk7-b106",
"jdk7-b105",
"jdk7-b104",
"jdk7-b103",
"jdk7-b102",
"jdk7-b101",
"jdk7-b100",
"jdk7-b99",
"jdk7-b98",
"jdk7-b97",
"jdk7-b96",
"jdk7-b95",
"jdk7-b94",
"jdk7-b93",
"jdk7-b92",
"jdk7-b91",
"jdk7-b90",
"jdk7-b89",
"jdk7-b88",
"jdk7-b87",
"jdk7-b86",
"jdk7-b85",
"jdk7-b84",
"jdk7-b83",
"jdk7-b82",
"jdk7-b81",
"jdk7-b80"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2590.json"
}
}
],
"modified": "2026-10-24T10:30:56.558381632Z",
"provider": "osv",
"references": [
"https://access.redhat.com/errata/RHSA-2020:0122",
"https://access.redhat.com/errata/RHSA-2020:0128",
"https://access.redhat.com/errata/RHSA-2020:0157",
"https://access.redhat.com/errata/RHSA-2020:0196",
"https://access.redhat.com/errata/RHSA-2020:0202",
"https://access.redhat.com/errata/RHSA-2020:0231",
"https://access.redhat.com/errata/RHSA-2020:0232",
"https://access.redhat.com/errata/RHSA-2020:0541",
"https://access.redhat.com/errata/RHSA-2020:0632",
"https://kc.mcafee.com/corporate/index?page=content&id=SB10315",
"https://lists.debian.org/debian-lts-announce/2020/02/msg00034.html",
"https://seclists.org/bugtraq/2020/Feb/22",
"https://security.gentoo.org/glsa/202101-19",
"https://security.netapp.com/advisory/ntap-20200122-0003/",
"https://usn.ubuntu.com/4257-1/",
"https://www.debian.org/security/2020/dsa-4605",
"https://www.debian.org/security/2020/dsa-4621",
"https://seclists.org/bugtraq/2020/Jan/24",
"https://www.oracle.com/security-alerts/cpujan2020.html"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*",
"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*"
],
"vendor_product": "netapp:active_iq_unified_manager",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"introduced": "9.5"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*"
],
"vendor_product": "netapp:e-series_santricity_os_controller",
"extracted_events": [
{
"range": [
{
"introduced": "11.0.0"
},
{
"last_affected": "11.60.3"
}
],
"source": "CPE_RANGE"
}
]
},
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "18.04"
},
{
"last_affected": "18.04"
},
{
"introduced": "19.10"
},
{
"last_affected": "19.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
},
{
"introduced": "10.0"
},
{
"last_affected": "10.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*",
"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*",
"cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*",
"cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.0:*:*:*:*:*:*:*",
"cpe:2.3:a:mcafee:epolicy_orchestrator:5.9.1:*:*:*:*:*:*:*"
],
"vendor_product": "mcafee:epolicy_orchestrator",
"extracted_events": [
{
"range": [
{
"introduced": "5.9.0"
},
{
"last_affected": "5.9.0"
},
{
"introduced": "5.9.1"
},
{
"last_affected": "5.9.1"
},
{
"introduced": "5.10.0-NA"
},
{
"last_affected": "5.10.0-NA"
},
{
"introduced": "5.10.0-update_1"
},
{
"last_affected": "5.10.0-update_1"
},
{
"introduced": "5.10.0-update_2"
},
{
"last_affected": "5.10.0-update_2"
},
{
"introduced": "5.10.0-update_3"
},
{
"last_affected": "5.10.0-update_3"
},
{
"introduced": "5.10.0-update_4"
},
{
"last_affected": "5.10.0-update_4"
},
{
"introduced": "5.10.0-update_5"
},
{
"last_affected": "5.10.0-update_5"
},
{
"introduced": "5.10.0-update_6"
},
{
"last_affected": "5.10.0-update_6"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*"
],
"vendor_product": "opensuse:leap",
"extracted_events": [
{
"range": [
{
"introduced": "15.1"
},
{
"last_affected": "15.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:jdk:1.7.0:update241:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jdk:1.8.0:update231:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jdk:11.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jdk:13.0.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:jdk",
"extracted_events": [
{
"range": [
{
"introduced": "1.7.0-update241"
},
{
"last_affected": "1.7.0-update241"
},
{
"introduced": "1.8.0-update231"
},
{
"last_affected": "1.8.0-update231"
},
{
"introduced": "11.0.5"
},
{
"last_affected": "11.0.5"
},
{
"introduced": "13.0.1"
},
{
"last_affected": "13.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:jre:1.7.0:update_241:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jre:1.8.0:update_231:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jre:11.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:jre:13.0.1:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:jre",
"extracted_events": [
{
"range": [
{
"introduced": "1.7.0-update_241"
},
{
"last_affected": "1.7.0-update_241"
},
{
"introduced": "1.8.0-update_231"
},
{
"last_affected": "1.8.0-update_231"
},
{
"introduced": "11.0.5"
},
{
"last_affected": "11.0.5"
},
{
"introduced": "13.0.1"
},
{
"last_affected": "13.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:a:oracle:openjdk:11.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:11:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:13.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:13:*:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:7:-:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:7:update241:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
"cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*"
],
"vendor_product": "oracle:openjdk",
"extracted_events": [
{
"range": [
{
"introduced": "7-NA"
},
{
"last_affected": "7-NA"
},
{
"introduced": "7-NA"
},
{
"last_affected": "7-NA"
},
{
"introduced": "7-NA"
},
{
"last_affected": "7-NA"
},
{
"introduced": "7-update241"
},
{
"last_affected": "7-update241"
},
{
"introduced": "7-update241"
},
{
"last_affected": "7-update241"
},
{
"introduced": "7-update241"
},
{
"last_affected": "7-update241"
},
{
"introduced": "8-NA"
},
{
"last_affected": "8-NA"
},
{
"introduced": "8-NA"
},
{
"last_affected": "8-NA"
},
{
"introduced": "8-NA"
},
{
"last_affected": "8-NA"
},
{
"introduced": "8-update152"
},
{
"last_affected": "8-update152"
},
{
"introduced": "8-update152"
},
{
"last_affected": "8-update152"
},
{
"introduced": "8-update152"
},
{
"last_affected": "8-update152"
},
{
"introduced": "8-update162"
},
{
"last_affected": "8-update162"
},
{
"introduced": "8-update162"
},
{
"last_affected": "8-update162"
},
{
"introduced": "8-update162"
},
{
"last_affected": "8-update162"
},
{
"introduced": "8-update172"
},
{
"last_affected": "8-update172"
},
{
"introduced": "8-update172"
},
{
"last_affected": "8-update172"
},
{
"introduced": "8-update172"
},
{
"last_affected": "8-update172"
},
{
"introduced": "8-update192"
},
{
"last_affected": "8-update192"
},
{
"introduced": "8-update192"
},
{
"last_affected": "8-update192"
},
{
"introduced": "8-update192"
},
{
"last_affected": "8-update192"
},
{
"introduced": "8-update202"
},
{
"last_affected": "8-update202"
},
{
"introduced": "8-update202"
},
{
"last_affected": "8-update202"
},
{
"introduced": "8-update202"
},
{
"last_affected": "8-update202"
},
{
"introduced": "8-update212"
},
{
"last_affected": "8-update212"
},
{
"introduced": "8-update212"
},
{
"last_affected": "8-update212"
},
{
"introduced": "8-update212"
},
{
"last_affected": "8-update212"
},
{
"introduced": "8-update222"
},
{
"last_affected": "8-update222"
},
{
"introduced": "8-update222"
},
{
"last_affected": "8-update222"
},
{
"introduced": "8-update222"
},
{
"last_affected": "8-update222"
},
{
"introduced": "8-update232"
},
{
"last_affected": "8-update232"
},
{
"introduced": "8-update232"
},
{
"last_affected": "8-update232"
},
{
"introduced": "8-update232"
},
{
"last_affected": "8-update232"
},
{
"introduced": "11"
},
{
"last_affected": "11"
},
{
"introduced": "11.0.1"
},
{
"last_affected": "11.0.1"
},
{
"introduced": "11.0.1"
},
{
"last_affected": "11.0.1"
},
{
"introduced": "11.0.1"
},
{
"last_affected": "11.0.1"
},
{
"introduced": "11.0.2"
},
{
"last_affected": "11.0.2"
},
{
"introduced": "11.0.2"
},
{
"last_affected": "11.0.2"
},
{
"introduced": "11.0.2"
},
{
"last_affected": "11.0.2"
},
{
"introduced": "11.0.3"
},
{
"last_affected": "11.0.3"
},
{
"introduced": "11.0.3"
},
{
"last_affected": "11.0.3"
},
{
"introduced": "11.0.3"
},
{
"last_affected": "11.0.3"
},
{
"introduced": "11.0.4"
},
{
"last_affected": "11.0.4"
},
{
"introduced": "11.0.4"
},
{
"last_affected": "11.0.4"
},
{
"introduced": "11.0.4"
},
{
"last_affected": "11.0.4"
},
{
"introduced": "11.0.5"
},
{
"last_affected": "11.0.5"
},
{
"introduced": "11.0.5"
},
{
"last_affected": "11.0.5"
},
{
"introduced": "11.0.5"
},
{
"last_affected": "11.0.5"
},
{
"introduced": "13"
},
{
"last_affected": "13"
},
{
"introduced": "13.0.1"
},
{
"last_affected": "13.0.1"
},
{
"introduced": "13.0.1"
},
{
"last_affected": "13.0.1"
},
{
"introduced": "13.0.1"
},
{
"last_affected": "13.0.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_desktop",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_eus:8.1:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_eus",
"extracted_events": [
{
"range": [
{
"introduced": "7.7"
},
{
"last_affected": "7.7"
},
{
"introduced": "8.1"
},
{
"last_affected": "8.1"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_aus",
"extracted_events": [
{
"range": [
{
"introduced": "7.7"
},
{
"last_affected": "7.7"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_tus:7.7:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_tus",
"extracted_events": [
{
"range": [
{
"introduced": "7.7"
},
{
"last_affected": "7.7"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "6.0"
},
{
"last_affected": "6.0"
},
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-2590",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 438695,
"published_at": "2020-01-15T17:15:19.613+00:00"
}