CVE-2013-0431

🗓️ 31 Jan 2013 14:10:00Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 1094 Views

Unspecified vulnerability in Java SE 7 through Update 11 allows remote attackers to bypass security sandbox via JMX

Reporter	Title	Published	Views	Family All 95
0day.today	Java Applet JMX Remote Code Execution	25 Feb 201300:00	–	zdt
IBM Security Bulletins	Security Bulletin: Tivoli Storage Productivity Center - Oracle CPU February 2013, April 2013	19 Aug 202218:23	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server updates to IBM SDK for Java Feb 2013 CPU	25 Sep 202220:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Rational Application Developer for WebSphere Software due to issues in IBM Java SDK (CVE-2013-0440, CVE-2013-0443, CVE-2013-0169)	5 Feb 202000:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager and WebSphere ILOG JRules: Multiple security vulnerabilities in IBM JRE 6.0	25 Sep 202223:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Smart Analytics System 5600 is affected by vulnerabilities in the IBM Java SDK	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli System Automation for Integrated Operations Management 2.1.1 Vulnerability: Multiple security vulnerabilities in IBM JREs 6.0 and 7.0	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Rational Developer for System z due to issues in IBM Java SDK (CVE-2013-0440, CVE-2013-0443, CVE-2013-0169)	27 Oct 202015:51	–	ibm
Tenable Nessus	Oracle Java SE 7 <= Update 11 Multiple Vulnerabilities (February 2013 CPU)	6 Feb 201200:00	–	nessus
Tenable Nessus	Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2013-156)	4 Sep 201300:00	–	nessus

NVD

Node

oracle jreMatch1.7.0-

oracle jreMatch1.7.0update1

oracle jreMatch1.7.0update10

oracle jreMatch1.7.0update11

oracle jreMatch1.7.0update2

oracle jreMatch1.7.0update3

oracle jreMatch1.7.0update4

oracle jreMatch1.7.0update5

oracle jreMatch1.7.0update6

oracle jreMatch1.7.0update7

oracle jreMatch1.7.0update9

Node

Source	Link
marc	www.marc.info/
rhn	www.rhn.redhat.com/errata/RHSA-2013-0247.html
kb	www.kb.cert.org/vuls/id/858729
us-cert	www.us-cert.gov/cas/techalerts/TA13-032A.html
wiki	www.wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056
blogs	www.blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53
informationweek	www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717
arstechnica	www.arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/
marc	www.marc.info/
seclists	www.seclists.org/fulldisclosure/2013/Jan/142

21 Apr 2026 19:02Current

8.3High risk

Vulners AI Score8.3

CVSS 25

CVSS 3.15.3

EPSS0.91543

SSVC