rewindex

RewindexCVEs

CVE-2013-0431: Oracle JRE Sandbox Bypass Vulnerability

Low · CVSS 3.7 (CVSS 3.1)KEV known exploitedEPSS 90.1%, 100th percentilePublished Updated Assigner: oracle

In CISA’s Known Exploited Vulnerabilities catalog: Oracle JRE Sandbox Bypass Vulnerability.

Added , federal remediation due . Known ransomware use: Known.

Required action: Apply updates per vendor instructions.

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.

Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

Oracle: Java Runtime Environment (JRE)

References

All CVEsMarkdownJSON