CVE:CVE-2020-2590
CNNVD:CNNVD-202001-662
Oracle Java SE和Oracle Java SE Embedded都是美国甲骨文（Oracle）公司的产品。Oracle Java SE是一款用于开发和部署桌面、服务器以及嵌入设备和实时环境中的Java应用程序。Oracle Java SE Embedded是一款针对嵌入式系统的、可移植的应用程序的Java平台。
Oracle Java SE中的Java SE和Java SE Embedded的Security组件存在安全漏洞。攻击者可利用该漏洞未授权更新、插入或删除数据，影响数据的完整性。 以下产品及版本受到影响：Oracle Java SE 7u241版本，Java SE 8u231版本，Java SE 11.0.5版本和13.0.1版本；Oracle Java SE Embedded 8u231版本。
solution:Upgrade oracle jdk to a higher version than 1.7.0:update241,1.8.0:update231,11.0.5,13.0.1,and avoid the version 1.7.0:update241,1.8.0:update231,11.0.5,13.0.1; Upgrade oracle jre to a higher version than 1.7.0:update_241,1.8.0:update_231,11.0.5,13.0.1,and avoid the version 1.7.0:update_241,1.8.0:update_231,11.0.5,13.0.1; Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_eus to a higher version than 7.7,8.1,and avoid the version 7.7,8.1; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_tus to a higher version than 7.7,and avoid the version 7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade oracle openjdk to a higher version than 7,7:update241,7:update80,7:update85,8,8:update102,8:update112,8:update152,8:update162,8:update172,8:update192,8:update20,8:update202,8:update212,8:update222,8:update232,8:update40,8:update60,8:update66,8:update72,8:update92,11,11.0.1,11.0.2,11.0.3,11.0.4,11.0.5,13,13.0.1,and avoid the version 7,7:update241,7:update80,7:update85,8,8:update102,8:update112,8:update152,8:update162,8:update172,8:update192,8:update20,8:update202,8:update212,8:update222,8:update232,8:update40,8:update60,8:update66,8:update72,8:update92,11,11.0.1,11.0.2,11.0.3,11.0.4,11.0.5,13,13.0.1; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.10,and avoid the version 16.04,18.04,19.10; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade mcafee epolicy_orchestrator to a higher version than 5.9.0,5.9.1,5.10.0,5.10.0:update_1,5.10.0:update_2,5.10.0:update_3,5.10.0:update_4,5.10.0:update_5,5.10.0:update_6,and avoid the version 5.9.0,5.9.1,5.10.0,5.10.0:update_1,5.10.0:update_2,5.10.0:update_3,5.10.0:update_4,5.10.0:update_5,5.10.0:update_6; netapp active_iq_unified_manager avoid the version [7.3,),[9.5,),no fixed version after 7.3,no fixed version after 9.5; Upgrade netapp e-series_performance_analyzer to a higher version than -; Upgrade netapp e-series_santricity_management to a higher version than -; Upgrade netapp e-series_santricity_os_controller to a higher version than 11.60.3,and avoid the version [11.0.0,11.60.3]; Upgrade netapp e-series_santricity_storage_manager to a higher version than -; Upgrade netapp e-series_santricity_web_services to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -; Upgrade netapp santricity_unified_manager to a higher version than -; Upgrade netapp steelstore_cloud_integrated_storage to a higher version than -