# CVE-2020-14798: openjdk-11-demo: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Libraries)

CVE-2020-14798 is fixed in 14 products on 1 platform, first by openjdk-11-demo 11.0.9+11-0ubuntu1~18.04.1, released October 21, 2020. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2020-14798
- Priority: Routine
- CVSS: n/a (Medium)
- EPSS: 0.0272
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 21, 2020

## Description

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE(component: Libraries). Supported versions that are affected are Java SE:7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploitvulnerability allows unauthenticated attacker with network access viamultiple protocols to compromise Java SE, Java SE Embedded. Successfulattacks require human interaction from a person other than the attacker.Successful attacks of this vulnerability can result in unauthorized update,insert or delete access to some of Java SE, Java SE Embedded accessibledata. Note: This vulnerability applies to Java deployments, typically inclients running sandboxed Java Web Start applications or sandboxed Javaapplets, that load and run untrusted code (e.g., code that comes from theinternet) and rely on the Java sandbox for security. This vulnerabilitydoes not apply to Java deployments, typically in servers, that load and runonly trusted code (e.g., code installed by an administrator). CVSS 3.1 BaseScore 3.1 (Integrity impacts). CVSS Vector:(CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | openjdk-11-demo Ubuntu 18.04.6 LTS (bionic) | 11.0.9+11-0ubuntu1~18.04.1 | [openjdk-11-demo 11.0.9+11-0ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-11-demo-11.0.9-11-0ubuntu1-18.04.1.md) | Oct 21, 2020 |
| Linux | openjdk-11-demo Ubuntu 20.04 LTS (focal) | 11.0.9+11-0ubuntu1~20.04 | [openjdk-11-demo 11.0.9+11-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-11-demo-11.0.9-11-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-11-demo Ubuntu 24.10 (oracular) | 11.0.9+11-0ubuntu2 | [openjdk-11-demo 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-openjdk-11-demo-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-demo Ubuntu 25.04 (plucky) | 11.0.9+11-0ubuntu2 | [openjdk-11-demo 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-openjdk-11-demo-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-jdk Ubuntu 18.04.6 LTS (bionic) | 11.0.9+11-0ubuntu1~18.04.1 | [openjdk-11-jdk 11.0.9+11-0ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-11-jdk-11.0.9-11-0ubuntu1-18.04.1.md) | Oct 21, 2020 |
| Linux | openjdk-11-jdk Ubuntu 20.04 LTS (focal) | 11.0.9+11-0ubuntu1~20.04 | [openjdk-11-jdk 11.0.9+11-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-11-jdk-11.0.9-11-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-11-jdk Ubuntu 24.10 (oracular) | 11.0.9+11-0ubuntu2 | [openjdk-11-jdk 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-openjdk-11-jdk-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-jdk Ubuntu 25.04 (plucky) | 11.0.9+11-0ubuntu2 | [openjdk-11-jdk 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-openjdk-11-jdk-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-jdk-headless Ubuntu 18.04.6 LTS (bionic) | 11.0.9+11-0ubuntu1~18.04.1 | [openjdk-11-jdk-headless 11.0.9+11-0ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-11-jdk-headless-11.0.9-11-0ubuntu1-18.04.1.md) | Oct 21, 2020 |
| Linux | openjdk-11-jdk-headless Ubuntu 20.04 LTS (focal) | 11.0.9+11-0ubuntu1~20.04 | [openjdk-11-jdk-headless 11.0.9+11-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-11-jdk-headless-11.0.9-11-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-11-jdk-headless Ubuntu 24.10 (oracular) | 11.0.9+11-0ubuntu2 | [openjdk-11-jdk-headless 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-openjdk-11-jdk-headless-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-jdk-headless Ubuntu 25.04 (plucky) | 11.0.9+11-0ubuntu2 | [openjdk-11-jdk-headless 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-openjdk-11-jdk-headless-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-jre Ubuntu 18.04.6 LTS (bionic) | 11.0.9+11-0ubuntu1~18.04.1 | [openjdk-11-jre 11.0.9+11-0ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-11-jre-11.0.9-11-0ubuntu1-18.04.1.md) | Oct 21, 2020 |
| Linux | openjdk-11-jre Ubuntu 20.04 LTS (focal) | 11.0.9+11-0ubuntu1~20.04 | [openjdk-11-jre 11.0.9+11-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-11-jre-11.0.9-11-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-11-jre Ubuntu 24.10 (oracular) | 11.0.9+11-0ubuntu2 | [openjdk-11-jre 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-openjdk-11-jre-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-jre Ubuntu 25.04 (plucky) | 11.0.9+11-0ubuntu2 | [openjdk-11-jre 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-openjdk-11-jre-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-jre-headless Ubuntu 18.04.6 LTS (bionic) | 11.0.9+11-0ubuntu1~18.04.1 | [openjdk-11-jre-headless 11.0.9+11-0ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-11-jre-headless-11.0.9-11-0ubuntu1-18.04.1.md) | Oct 21, 2020 |
| Linux | openjdk-11-jre-headless Ubuntu 20.04 LTS (focal) | 11.0.9+11-0ubuntu1~20.04 | [openjdk-11-jre-headless 11.0.9+11-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-11-jre-headless-11.0.9-11-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-11-jre-headless Ubuntu 24.10 (oracular) | 11.0.9+11-0ubuntu2 | [openjdk-11-jre-headless 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-openjdk-11-jre-headless-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-jre-headless Ubuntu 25.04 (plucky) | 11.0.9+11-0ubuntu2 | [openjdk-11-jre-headless 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-openjdk-11-jre-headless-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-jre-zero Ubuntu 18.04.6 LTS (bionic) | 11.0.9+11-0ubuntu1~18.04.1 | [openjdk-11-jre-zero 11.0.9+11-0ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-11-jre-zero-11.0.9-11-0ubuntu1-18.04.1.md) | Oct 21, 2020 |
| Linux | openjdk-11-jre-zero Ubuntu 20.04 LTS (focal) | 11.0.9+11-0ubuntu1~20.04 | [openjdk-11-jre-zero 11.0.9+11-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-11-jre-zero-11.0.9-11-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-11-jre-zero Ubuntu 24.10 (oracular) | 11.0.9+11-0ubuntu2 | [openjdk-11-jre-zero 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-openjdk-11-jre-zero-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-jre-zero Ubuntu 25.04 (plucky) | 11.0.9+11-0ubuntu2 | [openjdk-11-jre-zero 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-openjdk-11-jre-zero-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-source Ubuntu 18.04.6 LTS (bionic) | 11.0.9+11-0ubuntu1~18.04.1 | [openjdk-11-source 11.0.9+11-0ubuntu1~18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-11-source-11.0.9-11-0ubuntu1-18.04.1.md) | Oct 21, 2020 |
| Linux | openjdk-11-source Ubuntu 20.04 LTS (focal) | 11.0.9+11-0ubuntu1~20.04 | [openjdk-11-source 11.0.9+11-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-11-source-11.0.9-11-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-11-source Ubuntu 24.10 (oracular) | 11.0.9+11-0ubuntu2 | [openjdk-11-source 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-openjdk-11-source-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-11-source Ubuntu 25.04 (plucky) | 11.0.9+11-0ubuntu2 | [openjdk-11-source 11.0.9+11-0ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-openjdk-11-source-11.0.9-11-0ubuntu2.md) | Jan 16, 2026 |
| Linux | openjdk-8-demo Ubuntu 18.04.6 LTS (bionic) | 8u272-b10-0ubuntu1~18.04 | [openjdk-8-demo 8u272-b10-0ubuntu1~18.04](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-8-demo-8u272-b10-0ubuntu1-18.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-demo Ubuntu 20.04 LTS (focal) | 8u272-b10-0ubuntu1~20.04 | [openjdk-8-demo 8u272-b10-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-8-demo-8u272-b10-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-jdk Ubuntu 18.04.6 LTS (bionic) | 8u272-b10-0ubuntu1~18.04 | [openjdk-8-jdk 8u272-b10-0ubuntu1~18.04](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-8-jdk-8u272-b10-0ubuntu1-18.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-jdk Ubuntu 20.04 LTS (focal) | 8u272-b10-0ubuntu1~20.04 | [openjdk-8-jdk 8u272-b10-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-8-jdk-8u272-b10-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-jdk-headless Ubuntu 18.04.6 LTS (bionic) | 8u272-b10-0ubuntu1~18.04 | [openjdk-8-jdk-headless 8u272-b10-0ubuntu1~18.04](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-8-jdk-headless-8u272-b10-0ubuntu1-18.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-jdk-headless Ubuntu 20.04 LTS (focal) | 8u272-b10-0ubuntu1~20.04 | [openjdk-8-jdk-headless 8u272-b10-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-8-jdk-headless-8u272-b10-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-jre Ubuntu 18.04.6 LTS (bionic) | 8u272-b10-0ubuntu1~18.04 | [openjdk-8-jre 8u272-b10-0ubuntu1~18.04](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-8-jre-8u272-b10-0ubuntu1-18.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-jre Ubuntu 20.04 LTS (focal) | 8u272-b10-0ubuntu1~20.04 | [openjdk-8-jre 8u272-b10-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-8-jre-8u272-b10-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-jre-headless Ubuntu 18.04.6 LTS (bionic) | 8u272-b10-0ubuntu1~18.04 | [openjdk-8-jre-headless 8u272-b10-0ubuntu1~18.04](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-8-jre-headless-8u272-b10-0ubuntu1-18.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-jre-headless Ubuntu 20.04 LTS (focal) | 8u272-b10-0ubuntu1~20.04 | [openjdk-8-jre-headless 8u272-b10-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-8-jre-headless-8u272-b10-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-jre-zero Ubuntu 18.04.6 LTS (bionic) | 8u272-b10-0ubuntu1~18.04 | [openjdk-8-jre-zero 8u272-b10-0ubuntu1~18.04](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-8-jre-zero-8u272-b10-0ubuntu1-18.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-jre-zero Ubuntu 20.04 LTS (focal) | 8u272-b10-0ubuntu1~20.04 | [openjdk-8-jre-zero 8u272-b10-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-8-jre-zero-8u272-b10-0ubuntu1-20.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-source Ubuntu 18.04.6 LTS (bionic) | 8u272-b10-0ubuntu1~18.04 | [openjdk-8-source 8u272-b10-0ubuntu1~18.04](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-openjdk-8-source-8u272-b10-0ubuntu1-18.04.md) | Oct 21, 2020 |
| Linux | openjdk-8-source Ubuntu 20.04 LTS (focal) | 8u272-b10-0ubuntu1~20.04 | [openjdk-8-source 8u272-b10-0ubuntu1~20.04](https://patchblox.com/security/data/fix/linux/ubuntu-focal-openjdk-8-source-8u272-b10-0ubuntu1-20.04.md) | Oct 21, 2020 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.