Lucene search

K
nvd[email protected]NVD:CVE-2013-5910
HistoryJan 15, 2014 - 4:08 p.m.

CVE-2013-5910

2014-01-1516:08:06
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

4.6 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.9%

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.

Affected configurations

NVD
Node
oraclejdkMatch1.6.0update65
OR
oraclejreMatch1.6.0update65
Node
oraclejdkMatch1.7.0update45
OR
oraclejreMatch1.7.0update45

References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

4.6 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.9%