CVE-2020-14803

openjdk-11-demo: Vulnerability in the Java SE product of Oracle Java SE (component:Libraries)

CVE-2020-14803 is fixed in 40 products on 1 platform, first by openjdk-11-demo 11.0.9+11-0ubuntu1~18.04.1, released October 21, 2020. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.3
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0316
88th percentile

Vulnerability in the Java SE product of Oracle Java SE (component:Libraries). Supported versions that are affected are Java SE: 11.0.8 and15. Easily exploitable vulnerability allows unauthenticated attacker withnetwork access via multiple protocols to compromise Java SE. Successfulattacks of this vulnerability can result in unauthorized read access to asubset of Java SE accessible data. Note: This vulnerability applies to Javadeployments, typically in clients running sandboxed Java Web Startapplications or sandboxed Java applets, that load and run untrusted code(e.g., code that comes from the internet) and rely on the Java sandbox forsecurity. This vulnerability does not apply to Java deployments, typicallyin servers, that load and run only trusted code (e.g., code installed by anadministrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSSVector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

Where it's fixed

ProductFixed inFixReleased
Linux
java-1.8.0-ibm · RHEL 8 1:1.8.0.6.25-2.el8_3 RHSA-2021:0736 Mar 4, 2021
java-1.8.0-ibm-demo · RHEL 8 1:1.8.0.6.25-2.el8_3 RHSA-2021:0736 Mar 4, 2021
java-1.8.0-ibm-devel · RHEL 8 1:1.8.0.6.25-2.el8_3 RHSA-2021:0736 Mar 4, 2021
java-1.8.0-ibm-headless · RHEL 8 1:1.8.0.6.25-2.el8_3 RHSA-2021:0736 Mar 4, 2021
java-1.8.0-ibm-jdbc · RHEL 8 1:1.8.0.6.25-2.el8_3 RHSA-2021:0736 Mar 4, 2021
java-1.8.0-ibm-plugin · RHEL 8 1:1.8.0.6.25-2.el8_3 RHSA-2021:0736 Mar 4, 2021
java-1.8.0-ibm-src · RHEL 8 1:1.8.0.6.25-2.el8_3 RHSA-2021:0736 Mar 4, 2021
java-1.8.0-ibm-webstart · RHEL 8 1:1.8.0.6.25-2.el8_3 RHSA-2021:0736 Mar 4, 2021
java-1.8.0-openjdk · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-accessibility · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-accessibility · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-demo · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-demo · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-devel · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-devel · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-headless · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-headless · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-javadoc · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-javadoc · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-javadoc-zip · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-javadoc-zip · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-1.8.0-openjdk-src · RHEL 8 1:1.8.0.272.b10-1.el8_2 RHSA-2020:4347 Oct 26, 2020
java-1.8.0-openjdk-src · ol 8 1:1.8.0.272.b10-1.el8_2 ELSA-2020-4347 Oct 27, 2020
java-11-openj9 · opensuse-leap 15.6 11.0.26.0-bp156.4.3.1 OPENSUSE-SU-2025:0066-1 Feb 18, 2025
java-11-openjdk · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-demo · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-demo · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-devel · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-devel · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-headless · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-headless · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-javadoc · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-javadoc · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-javadoc-zip · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-javadoc-zip · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-jmods · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-jmods · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-src · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-src · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
java-11-openjdk-static-libs · RHEL 8 1:11.0.9.11-0.el8_2 RHSA-2020:4305 Oct 22, 2020
java-11-openjdk-static-libs · ol 8 1:11.0.9.11-0.el8_2 ELSA-2020-4305 Oct 22, 2020
openjdk-11-demo · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-demo 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-demo · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-demo 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-demo · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-demo 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-demo · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-demo 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jdk · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-jdk 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-jdk · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-jdk 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-jdk · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-jdk 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jdk · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-jdk 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jdk-headless · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-jdk-headless 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-jdk-headless · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-jdk-headless 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-jdk-headless · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-jdk-headless 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jdk-headless · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-jdk-headless 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-jre 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-jre · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-jre 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-jre · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-jre 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-jre 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre-headless · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-jre-headless 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-jre-headless · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-jre-headless 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-jre-headless · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-jre-headless 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre-headless · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-jre-headless 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre-zero · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-jre-zero 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-jre-zero · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-jre-zero 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-jre-zero · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-jre-zero 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-jre-zero · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-jre-zero 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-source · Ubuntu 18.04.6 LTS (bionic) 11.0.9+11-0ubuntu1~18.04.1 openjdk-11-source 11.0.9+11-0ubuntu1~18.04.1 Oct 21, 2020
openjdk-11-source · Ubuntu 20.04 LTS (focal) 11.0.9+11-0ubuntu1~20.04 openjdk-11-source 11.0.9+11-0ubuntu1~20.04 Oct 21, 2020
openjdk-11-source · Ubuntu 24.10 (oracular) 11.0.9+11-0ubuntu2 openjdk-11-source 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-11-source · Ubuntu 25.04 (plucky) 11.0.9+11-0ubuntu2 openjdk-11-source 11.0.9+11-0ubuntu2 Jan 16, 2026
openjdk-8-demo · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-demo 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-demo · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-demo 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-jdk · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-jdk 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-jdk · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-jdk 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-jdk-headless · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-jdk-headless 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-jdk-headless · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-jdk-headless 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-jre · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-jre 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-jre · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-jre 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-jre-headless · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-jre-headless 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-jre-headless · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-jre-headless 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-jre-zero · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-jre-zero 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-jre-zero · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-jre-zero 8u272-b10-0ubuntu1~20.04 Oct 21, 2020
openjdk-8-source · Ubuntu 18.04.6 LTS (bionic) 8u272-b10-0ubuntu1~18.04 openjdk-8-source 8u272-b10-0ubuntu1~18.04 Oct 21, 2020
openjdk-8-source · Ubuntu 20.04 LTS (focal) 8u272-b10-0ubuntu1~20.04 openjdk-8-source 8u272-b10-0ubuntu1~20.04 Oct 21, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.