[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbE3Te83XlgBDuHp9-VqvVA7MDeSHbPMliTKz5IWTV7w":3,"g5a-risk:CVE-2020-11998":176},{"success":4,"data":5,"meta":174},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":73,"references":74,"referencesCount":101,"weaknesses":102,"weaknessesCount":106,"isActivelyExploited":107,"cisaInfo":27,"otxData":27,"relatedBlogPosts":108,"seoMetadata":109,"configurations":134,"relatedVendorCves":165,"notableEvents":166},"CVE-2020-11998","What is CVE-2020-11998?","A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https:\u002F\u002Fdocs.oracle.com\u002Fjavase\u002F8\u002Fdocs\u002Ftechnotes\u002Fguides\u002Fmanagement\u002Fagent.html \"A remote client could create a javax.management.loading.MLet MBean and use it to create new MBeans from arbitrary URLs, at least if there is no security manager. In other words, a rogue remote client could make your Java application execute arbitrary code.\" Mitigation: Upgrade to Apache ActiveMQ 5.15.13","A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that con...","2020-09-10T19:15:13.083","2023-11-07T03:15:18.507",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.48885,[39,39,39,39,39,39,39],"Critical",[43,48,53,56,59,62,66,70],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","activemq","5.15.12","cpe:2.3:a:apache:activemq:5.15.12:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"oracle","communications_diameter_signaling_router","*","cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*",{"vendor":49,"product":54,"version":51,"criteria":55,"vulnerable":4},"communications_element_manager","cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*",{"vendor":49,"product":57,"version":51,"criteria":58,"vulnerable":4},"communications_session_report_manager","cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",{"vendor":49,"product":60,"version":51,"criteria":61,"vulnerable":4},"communications_session_route_manager","cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",{"vendor":49,"product":63,"version":64,"criteria":65,"vulnerable":4},"enterprise_repository","11.1.1.7.0","cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0:*:*:*:*:*:*:*",{"vendor":49,"product":67,"version":68,"criteria":69,"vulnerable":4},"flexcube_private_banking","12.0.0","cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",{"vendor":49,"product":67,"version":71,"criteria":72,"vulnerable":4},"12.1.0","cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",8,[75,80,83,86,92,95,98],{"url":76,"source":77,"tags":78},"http:\u002F\u002Factivemq.apache.org\u002Fsecurity-advisories.data\u002FCVE-2020-11998-announcement.txt","Apache",[79],"Vendor Advisory",{"url":81,"source":77,"tags":82},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E",[],{"url":84,"source":77,"tags":85},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frb2fd3bf2dce042e0ab3f3c94c4767c96bb2e7e6737624d63162df36d%40%3Ccommits.activemq.apache.org%3E",[],{"url":87,"source":88,"tags":89},"https:\u002F\u002Fwww.oracle.com\u002F\u002Fsecurity-alerts\u002Fcpujul2021.html","Oracle",[90,91],"Patch","Third Party Advisory",{"url":93,"source":88,"tags":94},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002FcpuApr2021.html",[90,91],{"url":96,"source":88,"tags":97},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2021.html",[91],{"url":99,"source":88,"tags":100},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2021.html",[90,91],7,[103],{"id":104,"name":104,"description":105},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":110,"metaDescription":111,"keywords":112,"canonicalUrl":113,"structuredData":114},"What is CVE-2020-11998? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-11998, a critical severity cyber security vulnerability from 2020. High exploit probability (48.9%). A regression has been...","CVE-2020-11998, CVE-2020-11998 vulnerability, CVE-2020-11998 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, oracle security, activemq vulnerability, communications_diameter_signaling_router vulnerability, communications_element_manager vulnerability, communications_session_report_manager vulnerability, communications_session_route_manager vulnerability, high risk vulnerability","\u002Fwhat-is\u002Fcve-2020-11998",{"@context":115,"@type":116,"headline":110,"description":111,"datePublished":10,"dateModified":11,"author":117,"publisher":121,"about":125,"mainEntityOfPage":129,"articleSection":132,"keywords":133},"https:\u002F\u002Fschema.org","TechArticle",{"@type":118,"name":119,"url":120},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":118,"name":119,"url":120,"logo":122},{"@type":123,"url":124},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":126,"name":6,"description":127,"additionalType":128},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":130,"@id":131},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-11998","Cybersecurity","CVE-2020-11998, CVE-2020-11998 vulnerability, CVE-2020-11998 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[135,142],{"Operator":27,"Negate":27,"Nodes":136},[137],{"Operator":138,"Negate":27,"CPEMatch":139},"OR",[140],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":141,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8EDE9C9F-F991-49CC-A8E8-93CEECA19245",{"Operator":27,"Negate":27,"Nodes":143},[144],{"Operator":138,"Negate":27,"CPEMatch":145},[146,150,154,157,159,161,163],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":148,"VersionEndExcluding":27,"VersionEndIncluding":149},"C88D46AF-459D-4917-9403-0F63FEC83512","8.0.0","8.5.0",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":151,"VersionStartExcluding":27,"VersionStartIncluding":152,"VersionEndExcluding":27,"VersionEndIncluding":153},"0331877D-D5DB-4EE8-8220-C1CDC3F90CB0","8.2.0","8.2.4.0",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":155,"VersionStartExcluding":27,"VersionStartIncluding":148,"VersionEndExcluding":27,"VersionEndIncluding":156},"2BA92C6D-4ECE-4E6B-B16D-84F951B09399","8.2.2",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":158,"VersionStartExcluding":27,"VersionStartIncluding":148,"VersionEndExcluding":27,"VersionEndIncluding":156},"5A528287-BF09-4E87-8192-81DBFB57A100",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":160,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"69300B13-8C0F-4433-A6E8-B2CE32C4723D",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":162,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6762F207-93C7-4363-B2F9-7A7C6F8AF993",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":164,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1B74B912-152D-4F38-9FC1-741D6D0B27FC",[],[167],{"id":168,"eventType":169,"eventTime":170,"details":171,"label":172,"color":173},"ad58882f-0222-44df-b8b2-48e6c2326558","HIGH_EPSS_DELTA","2026-06-16T04:05:56.830693+00:00","Daily EPSS score increased by 0.443 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":175,"version":33},1792249631307,{"score":177,"band":178,"action":179,"scoredAt":180},61,"Medium","Plan remediation","2026-10-16T06:49:18.564224+00:00"]