CVE-2013-1490

EPSS 1.32%
Published 31.01.2013 14:55:01
Last modified 11.04.2025 00:51:21
Source secalert_us@oracle.com
Teams watchlist Login
Open Login

Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a different vulnerability than CVE-2013-0431.  NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being assigned because this vulnerability has received significant public attention, and the original researcher has an established history of releasing vulnerability reports that have been fixed by vendors.  NOTE: this issue also exists in SE 6, but it cannot be exploited without a separate vulnerability.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Oracle ≫ Jdk Version1.7.0 Updateupdate11

Oracle ≫ Jre Version1.7.0 Updateupdate11

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.32%	0.79

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/

http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53

http://seclists.org/fulldisclosure/2013/Jan/142

http://seclists.org/fulldisclosure/2013/Jan/195

http://www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717

http://www.securityfocus.com/archive/1/525387/30/0/threaded

https://nvd.nist.gov/vuln/detail/CVE-2013-1490

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-1490

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-1490

EUVD