CVE-2020-14621: 
NixOS vulnerability analysis and mitigation

CVE-2020-14621 is a vulnerability discovered in Java SE (Java Platform, Standard Edition) that affects multiple versions including Java SE 7u261, 8u251, 11.0.7, and 14.0.1. The vulnerability was discovered by Roman Shemyakin and was disclosed in Oracle's July 2020 Critical Patch Update (Oracle CPU).

The vulnerability relates to incorrect handling of XML namespaces in Java SE's XML processing components. This is identified as 'Better XML namespace handling' in Oracle's security advisory. The vulnerability received a CVSS v3.1 base score of 5.3 (MEDIUM) with the vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N (NVD).

If exploited, this vulnerability could allow an unauthenticated attacker with network access to compromise Java SE. The attacker could potentially insert, edit, or obtain sensitive information through manipulation of XML namespace handling (Ubuntu Security).

The vulnerability has been fixed in multiple Java SE versions: Java SE 7u261, 8u251, 11.0.7, and 14.0.1. Users are strongly recommended to update to these or later versions. For OpenJDK users, the fix is available in version 11.0.8+10 for OpenJDK 11 and version 8.265-b01 for OpenJDK 8 (Ubuntu Security, Debian Security).