onyx --cves cve-2020-2767

CVE-2020-2767

score: <0.1
cvss: 4.8
epss: 2.2%
published: 2020-04-15
kev added: —
first seen: 2026-10-21

Oracle Java SE 11.0.6 and 14 contain a vulnerability in the JSSE component caused by improper input validation, letting unauthenticated attackers with network access via HTTPS perform unauthorized data modifications and read access, exploit requires network access via HTTPS.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2020-04-15 Published
2026-10-21 Tracked by Onyx

Weaknesses

NVD-CWE-noinfo

References 5

https://www.oracle.com/security-alerts/cpuapr2020.html
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00000.html
https://security.netapp.com/advisory/ntap-20200416-0004/
https://usn.ubuntu.com/4337-1/
https://www.debian.org/security/2020/dsa-4662