Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-1489
HistoryJan 31, 2013 - 2:55 p.m.

CVE-2013-1489

2013-01-3114:55:01
[email protected]
web.nvd.nist.gov
125
oracle
java
security vulnerability
remote execution
unsigned code
nvd
cve-2013-1489

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the “Very High” security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka “Issue 53” and the “Java Security Slider” vulnerability.

Affected configurations

NVD
Node
oraclejdkMatch1.7.0update10windows
OR
oraclejdkMatch1.7.0update11windows
OR
oraclejreMatch1.7.0update10windows
OR
oraclejreMatch1.7.0update11windows
AND
googlechromeMatch-
OR
microsoftinternet_explorerMatch-
OR
mozillafirefox
OR
operaopera_browserMatch-

References

Related

checkpoint_advisories 1
cvelist 1
prion 1
ubuntucve 1
nvd 1
nessus 9
redhat 1
openvas 2
ibm 6
cert 1
securityvulns 1
checkpoint_advisories
checkpoint_advisories
Oracle Java Security Slider Feature Bypass (CVE-2013-1489)
2013-04-04 00:00:00
cvelist
cvelist
CVE-2013-1489
2013-01-31 14:10:00
prion
prion
Security feature bypass
2013-01-31 14:55:00
ubuntucve
ubuntucve
CVE-2013-1489
2013-01-31 00:00:00
nvd
nvd
CVE-2013-1489
2013-01-31 14:55:01
nessus
nessus
RHEL 5 : java-1.4.2-ibm (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 5 / 6 : java-1.7.0-oracle (RHSA-2013:0237)
2013-02-05 00:00:00
Oracle Java SE Multiple Vulnerabilities (February 2013 CPU)
2013-02-04 00:00:00
redhat
redhat
(RHSA-2013:0237) Critical: java-1.7.0-oracle security update
2013-02-04 00:00:00
openvas
openvas
Oracle Java SE Multiple Vulnerabilities -01 (Feb 2013) - Windows
2013-02-06 00:00:00
Oracle Java SE Multiple Vulnerabilities -01 Feb 13 (Windows)
2013-02-06 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in Rational Application Developer for WebSphere Software due to issues in IBM Java SDK (CVE-2013-0440, CVE-2013-0443, CVE-2013-0169)
2020-02-05 00:09:48
Security Bulletin: Vulnerability in Rational Developer for System z due to issues in IBM Java SDK (CVE-2013-0440, CVE-2013-0443, CVE-2013-0169)
2020-10-27 15:51:50
Security Bulletin: WebSphere Application Server updates to IBM SDK for Java Feb 2013 CPU
2022-09-25 20:45:36
cert
cert
Oracle Java contains multiple vulnerabilities
2013-02-01 00:00:00
securityvulns
securityvulns
Oracle Java multiple security vulnerabilities
2013-03-19 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

JSON
Related for CVE-2013-1489
checkpoint_advisories1cvelist1prion1ubuntucve1nvd1nessus9redhat1openvas2ibm6cert1securityvulns1