Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adoptopenjdk | adoptopenjdk-upgrade-latest | Sep 1, 2021 | Oct 21, 2020 | |
| Alpine Linux | alpine-linux-upgrade-openjdk7alpine-linux-upgrade-openjdk8alpine-linux-upgrade-openjdk11 | Aug 22, 2024 | Oct 21, 2020 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-java-1-8-0-openjdkamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-accessibilityamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-accessibility-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-debuginfoamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-demoamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-demo-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-develamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-devel-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-headlessamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-headless-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadocamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadoc-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadoc-zipamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-javadoc-zip-debugamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-srcamazon-linux-ami-2-upgrade-java-1-8-0-openjdk-src-debugamazon-linux-ami-2-upgrade-java-11-openjdkamazon-linux-ami-2-upgrade-java-11-openjdk-debugamazon-linux-ami-2-upgrade-java-11-openjdk-debuginfoamazon-linux-ami-2-upgrade-java-11-openjdk-demoamazon-linux-ami-2-upgrade-java-11-openjdk-demo-debugamazon-linux-ami-2-upgrade-java-11-openjdk-develamazon-linux-ami-2-upgrade-java-11-openjdk-devel-debugamazon-linux-ami-2-upgrade-java-11-openjdk-headlessamazon-linux-ami-2-upgrade-java-11-openjdk-headless-debugamazon-linux-ami-2-upgrade-java-11-openjdk-javadocamazon-linux-ami-2-upgrade-java-11-openjdk-javadoc-debugamazon-linux-ami-2-upgrade-java-11-openjdk-javadoc-zipamazon-linux-ami-2-upgrade-java-11-openjdk-javadoc-zip-debugamazon-linux-ami-2-upgrade-java-11-openjdk-jmodsamazon-linux-ami-2-upgrade-java-11-openjdk-jmods-debugamazon-linux-ami-2-upgrade-java-11-openjdk-srcamazon-linux-ami-2-upgrade-java-11-openjdk-src-debugamazon-linux-ami-2-upgrade-java-11-openjdk-static-libsamazon-linux-ami-2-upgrade-java-11-openjdk-static-libs-debug | Jan 8, 2021 | Oct 21, 2020 | |
| Amazon_linux | — | amazon-linux-upgrade-java-1-8-0-openjdk | Dec 19, 2020 | Oct 21, 2020 |
| Azul Zulu | azul-zulu-upgrade-latest | Jun 10, 2021 | Oct 21, 2020 | |
| Centos_linux | — | centos-upgrade-java-1-7-1-ibmcentos-upgrade-java-1-7-1-ibm-democentos-upgrade-java-1-7-1-ibm-develcentos-upgrade-java-1-7-1-ibm-jdbccentos-upgrade-java-1-7-1-ibm-plugincentos-upgrade-java-1-7-1-ibm-srccentos-upgrade-java-1-8-0-ibmcentos-upgrade-java-1-8-0-ibm-democentos-upgrade-java-1-8-0-ibm-develcentos-upgrade-java-1-8-0-ibm-headlesscentos-upgrade-java-1-8-0-ibm-jdbccentos-upgrade-java-1-8-0-ibm-plugincentos-upgrade-java-1-8-0-ibm-srccentos-upgrade-java-1-8-0-ibm-webstartcentos-upgrade-java-1-8-0-openjdkcentos-upgrade-java-1-8-0-openjdk-accessibilitycentos-upgrade-java-1-8-0-openjdk-debugcentos-upgrade-java-1-8-0-openjdk-debuginfocentos-upgrade-java-1-8-0-openjdk-debugsourcecentos-upgrade-java-1-8-0-openjdk-democentos-upgrade-java-1-8-0-openjdk-demo-debugcentos-upgrade-java-1-8-0-openjdk-demo-debuginfocentos-upgrade-java-1-8-0-openjdk-demo-slowdebug-debuginfocentos-upgrade-java-1-8-0-openjdk-develcentos-upgrade-java-1-8-0-openjdk-devel-debugcentos-upgrade-java-1-8-0-openjdk-devel-debuginfocentos-upgrade-java-1-8-0-openjdk-devel-slowdebug-debuginfocentos-upgrade-java-1-8-0-openjdk-headlesscentos-upgrade-java-1-8-0-openjdk-headless-debugcentos-upgrade-java-1-8-0-openjdk-headless-debuginfocentos-upgrade-java-1-8-0-openjdk-headless-slowdebug-debuginfocentos-upgrade-java-1-8-0-openjdk-javadoccentos-upgrade-java-1-8-0-openjdk-javadoc-debugcentos-upgrade-java-1-8-0-openjdk-javadoc-zipcentos-upgrade-java-1-8-0-openjdk-slowdebug-debuginfocentos-upgrade-java-1-8-0-openjdk-srccentos-upgrade-java-1-8-0-openjdk-src-debugcentos-upgrade-java-11-openjdkcentos-upgrade-java-11-openjdk-debuginfocentos-upgrade-java-11-openjdk-debugsourcecentos-upgrade-java-11-openjdk-democentos-upgrade-java-11-openjdk-develcentos-upgrade-java-11-openjdk-devel-debuginfocentos-upgrade-java-11-openjdk-headlesscentos-upgrade-java-11-openjdk-headless-debuginfocentos-upgrade-java-11-openjdk-javadoccentos-upgrade-java-11-openjdk-javadoc-zipcentos-upgrade-java-11-openjdk-jmodscentos-upgrade-java-11-openjdk-srccentos-upgrade-java-11-openjdk-static-libs | Oct 23, 2020 | Oct 21, 2020 |
| Debian | debian-upgrade-openjdk-11 | Oct 26, 2020 | Oct 21, 2020 | |
| Eclipseadoptium | eclipseadoptium-upgrade-latest | Jun 26, 2026 | Oct 21, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-dev-java-icedteagentoo-linux-upgrade-dev-java-icedtea-bingentoo-linux-upgrade-dev-java-openjdkgentoo-linux-upgrade-dev-java-openjdk-bingentoo-linux-upgrade-dev-java-openjdk-jre-bin | Jan 25, 2021 | Oct 21, 2020 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-java-1.8.0-openjdkhuawei-euleros-2_0_sp2-upgrade-java-1.8.0-openjdk-develhuawei-euleros-2_0_sp2-upgrade-java-1.8.0-openjdk-headless | Feb 22, 2021 | Oct 21, 2020 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-java-1.8.0-openjdkhuawei-euleros-2_0_sp3-upgrade-java-1.8.0-openjdk-develhuawei-euleros-2_0_sp3-upgrade-java-1.8.0-openjdk-headless | Jan 20, 2021 | Oct 21, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-java-1.8.0-openjdkhuawei-euleros-2_0_sp5-upgrade-java-1.8.0-openjdk-develhuawei-euleros-2_0_sp5-upgrade-java-1.8.0-openjdk-headless | Feb 3, 2021 | Oct 21, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-java-1.8.0-openjdkhuawei-euleros-2_0_sp8-upgrade-java-1.8.0-openjdk-develhuawei-euleros-2_0_sp8-upgrade-java-1.8.0-openjdk-headless | Jun 28, 2021 | Oct 21, 2020 | |
| Ibm Aix | ibm-aix-java_mar2021_advisory | Mar 24, 2021 | Oct 21, 2020 | |
| Ibm Java | — | ibm-java-upgrade-7_0_10_75ibm-java-upgrade-7_1_4_75ibm-java-upgrade-8_0_6_25 | Nov 8, 2021 | Oct 21, 2020 |
| Ibm Was | ibm-was-upgrade-latest | Oct 21, 2020 | Oct 21, 2020 | |
| Jre Vuln | jre-upgrade-latest | Oct 22, 2020 | Oct 22, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-java-11-openjdkoracle-linux-upgrade-java-11-openjdk-demooracle-linux-upgrade-java-11-openjdk-develoracle-linux-upgrade-java-11-openjdk-headlessoracle-linux-upgrade-java-11-openjdk-javadocoracle-linux-upgrade-java-11-openjdk-javadoc-ziporacle-linux-upgrade-java-11-openjdk-jmodsoracle-linux-upgrade-java-11-openjdk-srcoracle-linux-upgrade-java-11-openjdk-static-libsoracle-linux-upgrade-java-1-8-0-openjdkoracle-linux-upgrade-java-1-8-0-openjdk-accessibilityoracle-linux-upgrade-java-1-8-0-openjdk-debugoracle-linux-upgrade-java-1-8-0-openjdk-demooracle-linux-upgrade-java-1-8-0-openjdk-demo-debugoracle-linux-upgrade-java-1-8-0-openjdk-develoracle-linux-upgrade-java-1-8-0-openjdk-devel-debugoracle-linux-upgrade-java-1-8-0-openjdk-headlessoracle-linux-upgrade-java-1-8-0-openjdk-headless-debugoracle-linux-upgrade-java-1-8-0-openjdk-javadocoracle-linux-upgrade-java-1-8-0-openjdk-javadoc-debugoracle-linux-upgrade-java-1-8-0-openjdk-javadoc-ziporacle-linux-upgrade-java-1-8-0-openjdk-srcoracle-linux-upgrade-java-1-8-0-openjdk-src-debug | Nov 23, 2022 | Oct 20, 2020 |
| Redhat_linux | redhat-upgrade-java-1-7-1-ibmredhat-upgrade-java-1-7-1-ibm-demoredhat-upgrade-java-1-7-1-ibm-develredhat-upgrade-java-1-7-1-ibm-jdbcredhat-upgrade-java-1-7-1-ibm-pluginredhat-upgrade-java-1-7-1-ibm-srcredhat-upgrade-java-1-8-0-ibmredhat-upgrade-java-1-8-0-ibm-demoredhat-upgrade-java-1-8-0-ibm-develredhat-upgrade-java-1-8-0-ibm-headlessredhat-upgrade-java-1-8-0-ibm-jdbcredhat-upgrade-java-1-8-0-ibm-pluginredhat-upgrade-java-1-8-0-ibm-srcredhat-upgrade-java-1-8-0-ibm-webstartredhat-upgrade-java-1-8-0-openjdkredhat-upgrade-java-1-8-0-openjdk-accessibilityredhat-upgrade-java-1-8-0-openjdk-debuginforedhat-upgrade-java-1-8-0-openjdk-debugsourceredhat-upgrade-java-1-8-0-openjdk-demoredhat-upgrade-java-1-8-0-openjdk-demo-debuginforedhat-upgrade-java-1-8-0-openjdk-demo-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-develredhat-upgrade-java-1-8-0-openjdk-devel-debuginforedhat-upgrade-java-1-8-0-openjdk-devel-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-headlessredhat-upgrade-java-1-8-0-openjdk-headless-debuginforedhat-upgrade-java-1-8-0-openjdk-headless-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-javadocredhat-upgrade-java-1-8-0-openjdk-javadoc-zipredhat-upgrade-java-1-8-0-openjdk-slowdebug-debuginforedhat-upgrade-java-1-8-0-openjdk-srcredhat-upgrade-java-11-openjdkredhat-upgrade-java-11-openjdk-debuginforedhat-upgrade-java-11-openjdk-debugsourceredhat-upgrade-java-11-openjdk-demoredhat-upgrade-java-11-openjdk-develredhat-upgrade-java-11-openjdk-devel-debuginforedhat-upgrade-java-11-openjdk-devel-slowdebug-debuginforedhat-upgrade-java-11-openjdk-headlessredhat-upgrade-java-11-openjdk-headless-debuginforedhat-upgrade-java-11-openjdk-headless-slowdebug-debuginforedhat-upgrade-java-11-openjdk-javadocredhat-upgrade-java-11-openjdk-javadoc-zipredhat-upgrade-java-11-openjdk-jmodsredhat-upgrade-java-11-openjdk-slowdebug-debuginforedhat-upgrade-java-11-openjdk-srcredhat-upgrade-java-11-openjdk-static-libs | Oct 23, 2020 | Oct 21, 2020 | |
| Suse | — | suse-upgrade-java-11-openjdksuse-upgrade-java-11-openjdk-accessibilitysuse-upgrade-java-11-openjdk-demosuse-upgrade-java-11-openjdk-develsuse-upgrade-java-11-openjdk-headlesssuse-upgrade-java-11-openjdk-javadocsuse-upgrade-java-11-openjdk-jmodssuse-upgrade-java-11-openjdk-srcsuse-upgrade-java-1_7_0-openjdksuse-upgrade-java-1_7_0-openjdk-demosuse-upgrade-java-1_7_0-openjdk-develsuse-upgrade-java-1_7_0-openjdk-headlesssuse-upgrade-java-1_7_1-ibmsuse-upgrade-java-1_7_1-ibm-alsasuse-upgrade-java-1_7_1-ibm-develsuse-upgrade-java-1_7_1-ibm-jdbcsuse-upgrade-java-1_7_1-ibm-pluginsuse-upgrade-java-1_8_0-ibmsuse-upgrade-java-1_8_0-ibm-alsasuse-upgrade-java-1_8_0-ibm-develsuse-upgrade-java-1_8_0-ibm-pluginsuse-upgrade-java-1_8_0-openj9suse-upgrade-java-1_8_0-openj9-accessibilitysuse-upgrade-java-1_8_0-openj9-demosuse-upgrade-java-1_8_0-openj9-develsuse-upgrade-java-1_8_0-openj9-headlesssuse-upgrade-java-1_8_0-openj9-javadocsuse-upgrade-java-1_8_0-openj9-srcsuse-upgrade-java-1_8_0-openjdksuse-upgrade-java-1_8_0-openjdk-accessibilitysuse-upgrade-java-1_8_0-openjdk-demosuse-upgrade-java-1_8_0-openjdk-develsuse-upgrade-java-1_8_0-openjdk-headlesssuse-upgrade-java-1_8_0-openjdk-javadocsuse-upgrade-java-1_8_0-openjdk-src | Nov 28, 2020 | Oct 21, 2020 |
| Ubuntu | ubuntu-upgrade-openjdk-11-jdkubuntu-upgrade-openjdk-11-jreubuntu-upgrade-openjdk-11-jre-headlessubuntu-upgrade-openjdk-11-jre-zeroubuntu-upgrade-openjdk-8-jdkubuntu-upgrade-openjdk-8-jreubuntu-upgrade-openjdk-8-jre-headlessubuntu-upgrade-openjdk-8-jre-zero | Mar 9, 2021 | Oct 21, 2020 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | May 27, 2026 | Oct 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub