What’s Vulnerable › Vulnerabilities

CVE-2020-2764

• Severity: low (CVSS 3.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-15 · updated 2026-06-17

Description

Vulnerability in the Java SE product of Oracle Java SE (component: Advanced Management Console). The supported version that is affected is Java Advanced Management Console: 2.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected products

• Oracle Corporation Java: 2.16

References

• https://kc.mcafee.com/corporate/index?page=content&id=SB10332
• https://security.netapp.com/advisory/ntap-20200416-0004/
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://kc.mcafee.com/corporate/index?page=content&id=SB10332
• https://security.netapp.com/advisory/ntap-20200416-0004/
• https://www.oracle.com/security-alerts/cpuapr2020.html

Get alerted when CVE-2020-2764 or the next vulnerability affects your stack