CVE-2020-14664 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-14664 Interim 1 21 2025-02-17T01:24:56Z current 2021-05-30T14:41:30Z 2025-02-17T01:24:56Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-14664 Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Tumbleweed java-1_7_0-openjdk java-1_7_0-openjdk-demo java-1_7_0-openjdk-devel java-1_7_0-openjdk-headless java-1_7_1-ibm java-1_7_1-ibm-alsa java-1_7_1-ibm-devel java-1_7_1-ibm-jdbc java-1_7_1-ibm-plugin java-1_8_0-ibm java-1_8_0-ibm-alsa java-1_8_0-ibm-devel java-1_8_0-ibm-plugin java-1_8_0-openjdk java-1_8_0-openjdk-demo java-1_8_0-openjdk-devel java-1_8_0-openjdk-headless openjfx-11.0.12-2.2 openjfx-devel-11.0.12-2.2 openjfx-javadoc-11.0.12-2.2 openjfx-jmods-11.0.12-2.2 openjfx-src-11.0.12-2.2 openjfx-11.0.12-2.2 as a component of openSUSE Tumbleweed openjfx-devel-11.0.12-2.2 as a component of openSUSE Tumbleweed openjfx-javadoc-11.0.12-2.2 as a component of openSUSE Tumbleweed openjfx-jmods-11.0.12-2.2 as a component of openSUSE Tumbleweed openjfx-src-11.0.12-2.2 as a component of openSUSE Tumbleweed java-1_7_1-ibm as a component of HPE Helion OpenStack 8 java-1_7_1-ibm-alsa as a component of HPE Helion OpenStack 8 java-1_7_1-ibm-devel as a component of HPE Helion OpenStack 8 java-1_7_1-ibm-jdbc as a component of HPE Helion OpenStack 8 java-1_7_1-ibm-plugin as a component of HPE Helion OpenStack 8 java-1_8_0-ibm as a component of HPE Helion OpenStack 8 java-1_8_0-ibm-alsa as a component of HPE Helion OpenStack 8 java-1_8_0-ibm-devel as a component of HPE Helion OpenStack 8 java-1_8_0-ibm-plugin as a component of HPE Helion OpenStack 8 java-1_8_0-openjdk as a component of HPE Helion OpenStack 8 java-1_8_0-openjdk-demo as a component of HPE Helion OpenStack 8 java-1_8_0-openjdk-devel as a component of HPE Helion OpenStack 8 java-1_8_0-openjdk-headless as a component of HPE Helion OpenStack 8 java-1_8_0-openjdk as a component of SUSE CaaS Platform 4.0 java-1_8_0-openjdk-demo as a component of SUSE CaaS Platform 4.0 java-1_8_0-openjdk-devel as a component of SUSE CaaS Platform 4.0 java-1_8_0-openjdk-headless as a component of SUSE CaaS Platform 4.0 java-1_8_0-openjdk as a component of SUSE Enterprise Storage 6 java-1_7_0-openjdk as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 java-1_8_0-openjdk as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 java-1_7_1-ibm as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 java-1_7_1-ibm as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_7_1-ibm-alsa as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_7_1-ibm-devel as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_7_1-ibm-jdbc as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_7_1-ibm-plugin as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_8_0-ibm as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_8_0-ibm-alsa as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_8_0-ibm-devel as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_8_0-ibm-plugin as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_8_0-openjdk as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_8_0-openjdk-demo as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_8_0-openjdk-devel as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_8_0-openjdk-headless as a component of SUSE Linux Enterprise Server 12 SP2-BCL java-1_7_0-openjdk as a component of SUSE Linux Enterprise Server 12 SP4 java-1_7_0-openjdk-demo as a component of SUSE Linux Enterprise Server 12 SP4 java-1_7_0-openjdk-devel as a component of SUSE Linux Enterprise Server 12 SP4 java-1_7_0-openjdk-headless as a component of SUSE Linux Enterprise Server 12 SP4 java-1_8_0-openjdk as a component of SUSE Linux Enterprise Server 12 SP4 java-1_8_0-openjdk-demo as a component of SUSE Linux Enterprise Server 12 SP4 java-1_8_0-openjdk-devel as a component of SUSE Linux Enterprise Server 12 SP4 java-1_8_0-openjdk-headless as a component of SUSE Linux Enterprise Server 12 SP4 java-1_7_1-ibm as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS java-1_7_1-ibm-alsa as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS java-1_7_1-ibm-devel as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS java-1_7_1-ibm-jdbc as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS java-1_7_1-ibm-plugin as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS java-1_8_0-openjdk as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS java-1_8_0-openjdk-demo as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS java-1_8_0-openjdk-devel as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS java-1_8_0-openjdk-headless as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS java-1_7_1-ibm as a component of SUSE Linux Enterprise Server 12 SP4-LTSS java-1_7_1-ibm-alsa as a component of SUSE Linux Enterprise Server 12 SP4-LTSS java-1_7_1-ibm-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS java-1_7_1-ibm-jdbc as a component of SUSE Linux Enterprise Server 12 SP4-LTSS java-1_7_1-ibm-plugin as a component of SUSE Linux Enterprise Server 12 SP4-LTSS java-1_8_0-openjdk as a component of SUSE Linux Enterprise Server 12 SP4-LTSS java-1_8_0-openjdk-demo as a component of SUSE Linux Enterprise Server 12 SP4-LTSS java-1_8_0-openjdk-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS java-1_8_0-openjdk-headless as a component of SUSE Linux Enterprise Server 12 SP4-LTSS java-1_7_1-ibm as a component of SUSE Linux Enterprise Server 12 SP5 java-1_7_1-ibm-alsa as a component of SUSE Linux Enterprise Server 12 SP5 java-1_7_1-ibm-devel as a component of SUSE Linux Enterprise Server 12 SP5 java-1_7_1-ibm-jdbc as a component of SUSE Linux Enterprise Server 12 SP5 java-1_7_1-ibm-plugin as a component of SUSE Linux Enterprise Server 12 SP5 java-1_8_0-openjdk as a component of SUSE Linux Enterprise Server 15 SP1-LTSS java-1_8_0-openjdk-demo as a component of SUSE Linux Enterprise Server 15 SP1-LTSS java-1_8_0-openjdk-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS java-1_8_0-openjdk-headless as a component of SUSE Linux Enterprise Server 15 SP1-LTSS java-1_7_1-ibm as a component of SUSE Linux Enterprise Server Teradata 12 SP3 java-1_8_0-ibm as a component of SUSE Linux Enterprise Server Teradata 12 SP3 java-1_8_0-openjdk as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_8_0-openjdk-demo as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_8_0-openjdk-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_8_0-openjdk-headless as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 java-1_7_1-ibm as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 java-1_7_1-ibm-alsa as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 java-1_7_1-ibm-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 java-1_7_1-ibm-jdbc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 java-1_7_1-ibm-plugin as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 java-1_8_0-openjdk as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 java-1_8_0-openjdk-demo as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 java-1_8_0-openjdk-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 java-1_8_0-openjdk-headless as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 java-1_7_1-ibm as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 java-1_8_0-openjdk as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 java-1_8_0-openjdk-demo as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 java-1_8_0-openjdk-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 java-1_8_0-openjdk-headless as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 java-1_7_1-ibm as a component of SUSE OpenStack Cloud 8 java-1_7_1-ibm-alsa as a component of SUSE OpenStack Cloud 8 java-1_7_1-ibm-devel as a component of SUSE OpenStack Cloud 8 java-1_7_1-ibm-jdbc as a component of SUSE OpenStack Cloud 8 java-1_7_1-ibm-plugin as a component of SUSE OpenStack Cloud 8 java-1_8_0-ibm as a component of SUSE OpenStack Cloud 8 java-1_8_0-ibm-alsa as a component of SUSE OpenStack Cloud 8 java-1_8_0-ibm-devel as a component of SUSE OpenStack Cloud 8 java-1_8_0-ibm-plugin as a component of SUSE OpenStack Cloud 8 java-1_8_0-openjdk as a component of SUSE OpenStack Cloud 8 java-1_8_0-openjdk-demo as a component of SUSE OpenStack Cloud 8 java-1_8_0-openjdk-devel as a component of SUSE OpenStack Cloud 8 java-1_8_0-openjdk-headless as a component of SUSE OpenStack Cloud 8 java-1_7_1-ibm as a component of SUSE OpenStack Cloud 9 java-1_7_1-ibm-alsa as a component of SUSE OpenStack Cloud 9 java-1_7_1-ibm-devel as a component of SUSE OpenStack Cloud 9 java-1_7_1-ibm-jdbc as a component of SUSE OpenStack Cloud 9 java-1_7_1-ibm-plugin as a component of SUSE OpenStack Cloud 9 java-1_8_0-openjdk as a component of SUSE OpenStack Cloud 9 java-1_8_0-openjdk-demo as a component of SUSE OpenStack Cloud 9 java-1_8_0-openjdk-devel as a component of SUSE OpenStack Cloud 9 java-1_8_0-openjdk-headless as a component of SUSE OpenStack Cloud 9 java-1_7_1-ibm as a component of SUSE OpenStack Cloud Crowbar 8 java-1_7_1-ibm-alsa as a component of SUSE OpenStack Cloud Crowbar 8 java-1_7_1-ibm-devel as a component of SUSE OpenStack Cloud Crowbar 8 java-1_7_1-ibm-jdbc as a component of SUSE OpenStack Cloud Crowbar 8 java-1_7_1-ibm-plugin as a component of SUSE OpenStack Cloud Crowbar 8 java-1_8_0-ibm as a component of SUSE OpenStack Cloud Crowbar 8 java-1_8_0-ibm-alsa as a component of SUSE OpenStack Cloud Crowbar 8 java-1_8_0-ibm-devel as a component of SUSE OpenStack Cloud Crowbar 8 java-1_8_0-ibm-plugin as a component of SUSE OpenStack Cloud Crowbar 8 java-1_8_0-openjdk as a component of SUSE OpenStack Cloud Crowbar 8 java-1_8_0-openjdk-demo as a component of SUSE OpenStack Cloud Crowbar 8 java-1_8_0-openjdk-devel as a component of SUSE OpenStack Cloud Crowbar 8 java-1_8_0-openjdk-headless as a component of SUSE OpenStack Cloud Crowbar 8 java-1_7_1-ibm as a component of SUSE OpenStack Cloud Crowbar 9 java-1_7_1-ibm-alsa as a component of SUSE OpenStack Cloud Crowbar 9 java-1_7_1-ibm-devel as a component of SUSE OpenStack Cloud Crowbar 9 java-1_7_1-ibm-jdbc as a component of SUSE OpenStack Cloud Crowbar 9 java-1_7_1-ibm-plugin as a component of SUSE OpenStack Cloud Crowbar 9 java-1_8_0-openjdk as a component of SUSE OpenStack Cloud Crowbar 9 java-1_8_0-openjdk-demo as a component of SUSE OpenStack Cloud Crowbar 9 java-1_8_0-openjdk-devel as a component of SUSE OpenStack Cloud Crowbar 9 java-1_8_0-openjdk-headless as a component of SUSE OpenStack Cloud Crowbar 9 Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). CVE-2020-14664 openSUSE Tumbleweed:openjfx-11.0.12-2.2 openSUSE Tumbleweed:openjfx-devel-11.0.12-2.2 openSUSE Tumbleweed:openjfx-javadoc-11.0.12-2.2 openSUSE Tumbleweed:openjfx-jmods-11.0.12-2.2 openSUSE Tumbleweed:openjfx-src-11.0.12-2.2 important 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H