VULNERABILITY INTELLIGENCE

CVE-2013-0431

CVSS score5.3 MEDIUM
EPSS probability90.15%
CISA KEVKnown exploited vulnerability
Published2013-01-31
Last modified2026-10-02
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Known Exploited Vulnerability

Oracle JRE Sandbox Bypass Vulnerability

Vendor / product: Oracle / Java Runtime Environment (JRE)

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.

Weakness classification

  • CWE-693: Protection Mechanism Failure

Primary references