Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-5838
HistoryOct 16, 2013 - 5:55 p.m.

CVE-2013-5838

2013-10-1617:55:05
[email protected]
web.nvd.nist.gov
44
oracle
java
se
7u25
vulnerability
confidentiality
integrity
availability
nvd
cve-2013-5838

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.6%

JSON

Unspecified vulnerability in Oracle Java SE 7u25 and earlier, and Java SE Embedded 7u25 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

Affected configurations

NVD
Node
oraclejdkRange≤1.7.0update25
OR
oraclejdkMatch1.7.0
OR
oraclejdkMatch1.7.0update1
OR
oraclejdkMatch1.7.0update10
OR
oraclejdkMatch1.7.0update11
OR
oraclejdkMatch1.7.0update13
OR
oraclejdkMatch1.7.0update15
OR
oraclejdkMatch1.7.0update17
OR
oraclejdkMatch1.7.0update2
OR
oraclejdkMatch1.7.0update21
OR
oraclejdkMatch1.7.0update3
OR
oraclejdkMatch1.7.0update4
OR
oraclejdkMatch1.7.0update5
OR
oraclejdkMatch1.7.0update6
OR
oraclejdkMatch1.7.0update7
OR
oraclejdkMatch1.7.0update9
Node
oraclejreRange≤1.7.0update25
OR
oraclejreMatch1.7.0
OR
oraclejreMatch1.7.0update1
OR
oraclejreMatch1.7.0update10
OR
oraclejreMatch1.7.0update11
OR
oraclejreMatch1.7.0update13
OR
oraclejreMatch1.7.0update15
OR
oraclejreMatch1.7.0update17
OR
oraclejreMatch1.7.0update2
OR
oraclejreMatch1.7.0update21
OR
oraclejreMatch1.7.0update3
OR
oraclejreMatch1.7.0update4
OR
oraclejreMatch1.7.0update5
OR
oraclejreMatch1.7.0update6
OR
oraclejreMatch1.7.0update7
OR
oraclejreMatch1.7.0update9
CPENameOperatorVersion
oracle:jdkoracle jdkle1.7.0

Related

cvelist 1
openvas 14
nvd 1
symantec 1
veracode 1
threatpost 2
ubuntucve 1
prion 1
archlinux 6
checkpoint_advisories 1
f5 2
ibm 7
redhat 4
nessus 20
mageia 1
centos 2
oraclelinux 2
amazon 1
suse 3
aix 1
kaspersky 1
securityvulns 1
oracle 1
gentoo 1
cvelist
cvelist
CVE-2013-5838
2013-10-16 17:31:00
openvas
openvas
Oracle Java SE JRE Multiple Unspecified Vulnerabilities-03 (Oct 2013) - Windows
2013-10-25 00:00:00
RedHat Update for java-1.7.0-openjdk RHSA-2013:1451-01
2013-10-23 00:00:00
RedHat Update for java-1.7.0-openjdk RHSA-2013:1447-01
2013-10-29 00:00:00
nvd
nvd
CVE-2013-5838
2013-10-16 17:55:05
symantec
symantec
Oracle Java SE CVE-2013-5838 Remote Security Vulnerability
2013-10-15 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:54:24
threatpost
threatpost
Broken 2013 Java Patch Leads to Sandbox Bypass
2016-03-14 09:24:46
Emergency Java Patch Re-Issued for 2013 Vulnerability
2016-03-24 12:05:59
ubuntucve
ubuntucve
CVE-2013-5838
2013-10-16 00:00:00
prion
prion
Buffer overflow
2013-10-16 17:55:00
archlinux
archlinux
jdk7-openjdk: sandbox escape
2016-04-01 00:00:00
jre7-openjdk: sandbox escape
2016-04-01 00:00:00
jre8-openjdk: sandbox escape
2016-03-29 00:00:00
checkpoint_advisories
checkpoint_advisories
Oracle Java SE Security Sandbox Escape (CVE-2013-5838; CVE-2016-0636)
2016-03-27 00:00:00
f5
f5
K61971428 : Multiple Java vulnerabilities
2016-05-23 00:00:00
SOL61971428 - Multiple Java vulnerabilities
2016-05-23 00:00:00
ibm
ibm
Security Bulletin: IBM Operational Decision Manager and WebSphere ILOG JRules: Multiple security vulnerabilities in IBM JRE
2018-06-15 06:59:10
Security Bulletin: Multiple vulnerabilities in current releases of the IBM® SDK, Java™ Technology Edition
2022-09-25 23:09:27
Security Bulletin: Multiple vulnerabilities in current IBM SDK for Java for WebSphere Application Server October 2013 CPU
2022-09-25 23:09:27
redhat
redhat
(RHSA-2013:1451) Critical: java-1.7.0-openjdk security update
2013-10-22 00:00:00
(RHSA-2013:1447) Important: java-1.7.0-openjdk security update
2013-10-21 00:00:00
(RHSA-2013:1507) Critical: java-1.7.0-ibm security update
2013-11-07 00:00:00
nessus
nessus
RHEL 6 : java-1.7.0-openjdk (RHSA-2013:1451)
2013-10-23 00:00:00
Scientific Linux Security Update : java-1.7.0-openjdk on SL6.x i386/x86_64 (20131022)
2013-10-24 00:00:00
Mandriva Linux Security Advisory : java-1.7.0-openjdk (MDVSA-2013:267)
2013-11-20 00:00:00
mageia
mageia
Updated java-1.7.0-openjdk package fixes security vulnerabilities
2013-11-13 23:03:04
centos
centos
java security update
2013-10-23 11:04:05
java security update
2013-10-22 07:41:01
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2013-10-22 00:00:00
java-1.7.0-openjdk security update
2013-10-21 00:00:00
amazon
amazon
Critical: java-1.7.0-openjdk
2013-10-23 15:22:00
suse
suse
Security update for IBM Java 5 (important)
2013-11-15 00:04:35
Security update for Java 6 (important)
2013-11-19 00:04:12
Security update for IBM Java 7 (important)
2013-11-22 08:04:19
aix
aix
Multiple Java vulnerabilities
2013-12-11 10:53:34
kaspersky
kaspersky
KLA10492 Multiple vulnerabilities in Oracle products
2013-10-16 00:00:00
securityvulns
securityvulns
Oracle / Sun / MySQL / PeopleSoft applications multiple security vulnerabilities
2013-12-09 00:00:00
oracle
oracle
Oracle Critical Patch Update - October 2013
2013-10-15 00:00:00
gentoo
gentoo
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.6%

JSON
Related for CVE-2013-5838
cvelist1openvas14nvd1symantec1veracode1threatpost2ubuntucve1prion1archlinux6checkpoint_advisories1f52ibm7redhat4nessus20mageia1centos2oraclelinux2amazon1suse3aix1kaspersky1securityvulns1oracle1gentoo1