CVE-2020-2518

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via multiple protocols to compromise Java VM. Successful attacks of this vulnerability can result in takeover of Java VM. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).

• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory

Published

Jan 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25174A DLL hijacking vulnerability in the B. Braun OnlineSuite Ve…7.8
• CVE-2020-25175GE Healthcare Imaging and Ultrasound Products may allow spec…9.8
• CVE-2020-25176Some commands used by the Rockwell Automation ISaGRAF Runtim…9.8
• CVE-2020-25177WECON PLC Editor Versions 1.3.8 and prior has a stack-based …8.8
• CVE-2020-25178ISaGRAF Workbench communicates with Rockwell Automation ISaG…8.8
• CVE-2020-25179GE Healthcare Imaging and Ultrasound Products may allow spec…9.8
• CVE-2020-25180Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x inc…6.5
• CVE-2020-25181WECON PLC Editor Versions 1.3.8 and prior has a heap-based b…8.8
• CVE-2020-25182Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x sea…6.7
• CVE-2020-25183Medtronic MyCareLink Smart 25000 contains an authenticatio…8.8
• CVE-2020-25184Rockwell Automation ISaGRAF Runtime Versions 4.x and 5.x sto…5.5
• CVE-2020-25185The affected product is vulnerable to five post-authenticati…8.8