onyx

onyx --cves cve-2020-2601

CVE-2020-2601

MEDOpenJDK
score
<0.1
cvss
6.8
epss
4.3%
published
2020-01-15
kev added
—
first seen

Oracle Java SE (7u241, 8u231, 11.0.5, 13.0.1) and Java SE Embedded (8u231) contain a security vulnerability caused by improper Kerberos authentication handling, letting unauthenticated attackers with network access compromise Java SE and Java SE Embedded, exploit requires network access via Kerberos.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2020-01-15 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 4.2%2026-09-23: epss 4.2%2026-09-24: epss 4.2%2026-09-25: epss 4.2%2026-09-26: epss 4.2%2026-09-27: epss 4.3%2026-09-28: epss 4.3%2026-09-29: epss 4.3%2026-09-30: epss 4.3%2026-10-01: epss 4.3%2026-10-02: epss 4.3%2026-10-03: epss 4.3%2026-10-04: epss 4.3%2026-10-05: epss 4.3%2026-10-06: epss 4.3%2026-10-07: epss 4.3%2026-10-08: epss 4.3%2026-10-09: epss 4.3%2026-10-10: epss 4.3%2026-10-11: epss 4.3%2026-10-12: epss 4.3%2026-10-13: epss 4.3%2026-10-14: epss 4.3%2026-10-15: epss 4.3%2026-10-16: epss 4.3%2026-10-18: epss 4.3%2026-10-19: epss 4.3%2026-10-20: epss 4.3%2026-10-21: epss 4.3%4.3%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

NVD-CWE-noinfo

References 20