Lucene search

K
f5F5F5:K16872
HistorySep 11, 2015 - 12:00 a.m.

K16872 : Java Runtime Environment vulnerability CVE-2013-4002

2015-09-1100:00:00
my.f5.com
21

6.2 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.019 Low

EPSS

Percentile

87.1%

Security Advisory Description

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect availability via unknown vectors. (CVE-2013-4002)
Impact
The vulnerable software is on the system, however it is not exposed with any configuration. It is possible from a local shell that an attacker could take advantage of this vulnerability, but access level requires a privileged user. There are no known network access vectors for this issue.

6.2 Medium

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.019 Low

EPSS

Percentile

87.1%