onyx

onyx --cves cve-2020-2778

CVE-2020-2778

LOWOpenJDK
score
<0.1
cvss
3.7
epss
2.4%
published
2020-04-15
kev added
—
first seen

Oracle Java SE 11.0.6 and 14 contain a security vulnerability in the JSSE component caused by improper data handling in HTTPS communication, letting unauthenticated network attackers access Java data, exploit requires network access via HTTPS.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2020-04-15 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 2.4%2026-09-23: epss 2.4%2026-09-24: epss 2.4%2026-09-25: epss 2.4%2026-09-26: epss 2.4%2026-09-27: epss 2.4%2026-09-28: epss 2.4%2026-09-29: epss 2.4%2026-09-30: epss 2.4%2026-10-01: epss 2.4%2026-10-02: epss 2.4%2026-10-03: epss 2.4%2026-10-04: epss 2.4%2026-10-05: epss 2.4%2026-10-06: epss 2.4%2026-10-07: epss 2.4%2026-10-08: epss 2.4%2026-10-09: epss 2.4%2026-10-10: epss 2.4%2026-10-11: epss 2.4%2026-10-12: epss 2.4%2026-10-13: epss 2.4%2026-10-14: epss 2.4%2026-10-15: epss 2.4%2026-10-16: epss 2.4%2026-10-18: epss 2.4%2026-10-19: epss 2.4%2026-10-20: epss 2.4%2026-10-21: epss 2.4%2.4%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

NVD-CWE-noinfo

References 5