CVE-2020-14718

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: JVMCI). Supported versions that are affected are 19.3.2 and 20.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

• https://www.oracle.com/security-alerts/cpujul2020.htmlVendor Advisory
• https://www.oracle.com/security-alerts/cpujul2020.htmlVendor Advisory

Published

Jul 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14712Vulnerability in the Oracle VM VirtualBox product of Oracle …5
• CVE-2020-14713Vulnerability in the Oracle VM VirtualBox product of Oracle …7.5
• CVE-2020-14714Vulnerability in the Oracle VM VirtualBox product of Oracle …4.4
• CVE-2020-14715Vulnerability in the Oracle VM VirtualBox product of Oracle …4.4
• CVE-2020-14716Vulnerability in the Oracle Common Applications product of O…4.7
• CVE-2020-14717Vulnerability in the Oracle Common Applications product of O…4.7
• CVE-2020-14719Vulnerability in the Oracle Internet Expenses product of Ora…7.7
• CVE-2020-1472An elevation of privilege vulnerability exists when an attac…5.5
• CVE-2020-14720Vulnerability in the Oracle Internet Expenses product of Ora…7.7
• CVE-2020-14721Vulnerability in the Oracle Enterprise Communications Broker…6.3
• CVE-2020-14722Vulnerability in the Oracle Enterprise Communications Broker…5.8
• CVE-2020-14723Vulnerability in the Oracle Help Technologies product of Ora…8.2