CVE-2013-5895

2014-01-1500:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

73.7%

JSON

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows
remote attackers to affect confidentiality via unknown vectors related to
JavaFX.

Notes

Author	Note
mdeslaur	in lucid+, NetX and the plugin moved to the icedtea-web package
jdstrand	sun-java6 is not redistributable, no longer in the archive and no longer tracked sun-java5 is EOL upstream and no longer tracked Based on Oracle advisory and lack of fixes from OpenJDK, marking as ‘not-affected’ for now (which is the best we can do until more information comes to light)