Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-2460
HistoryJun 18, 2013 - 10:55 p.m.

CVE-2013-2460

2013-06-1822:55:02
[email protected]
web.nvd.nist.gov
70
cve-2013-2460
oracle
java
vulnerability
jre
remote attackers
confidentiality
integrity
availability
openjdk
serviceability
bypass
sandbox

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.968 High

EPSS

Percentile

99.7%

JSON

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Serviceability. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to “insufficient access checks” in the tracing component.

Affected configurations

NVD
Node
oraclejreRange≤1.7.0update21
OR
oraclejreMatch1.7.0
OR
oraclejreMatch1.7.0update1
OR
oraclejreMatch1.7.0update10
OR
oraclejreMatch1.7.0update11
OR
oraclejreMatch1.7.0update13
OR
oraclejreMatch1.7.0update15
OR
oraclejreMatch1.7.0update17
OR
oraclejreMatch1.7.0update2
OR
oraclejreMatch1.7.0update3
OR
oraclejreMatch1.7.0update4
OR
oraclejreMatch1.7.0update5
OR
oraclejreMatch1.7.0update6
OR
oraclejreMatch1.7.0update7
OR
oraclejreMatch1.7.0update9
Node
oraclejdkRange≤1.7.0update21
OR
oraclejdkMatch1.7.0
OR
oraclejdkMatch1.7.0update1
OR
oraclejdkMatch1.7.0update10
OR
oraclejdkMatch1.7.0update11
OR
oraclejdkMatch1.7.0update13
OR
oraclejdkMatch1.7.0update15
OR
oraclejdkMatch1.7.0update17
OR
oraclejdkMatch1.7.0update2
OR
oraclejdkMatch1.7.0update3
OR
oraclejdkMatch1.7.0update4
OR
oraclejdkMatch1.7.0update5
OR
oraclejdkMatch1.7.0update6
OR
oraclejdkMatch1.7.0update7
OR
oraclejdkMatch1.7.0update9
CPENameOperatorVersion
oracle:jreoracle jrele1.7.0

References

Related

thn 1
packetstorm 1
checkpoint_advisories 2
metasploit 1
ubuntucve 1
saint 4
symantec 1
veracode 1
cvelist 1
seebug 1
prion 1
nvd 1
exploitdb 1
openvas 24
oraclelinux 2
nessus 29
mageia 1
redhat 4
centos 2
amazon 1
suse 3
debian 1
ubuntu 2
ibm 14
securityvulns 1
gentoo 2
thn
thn
Caphaw Banking Malware Distributed via YouTube Ads
2014-02-24 23:20:00
packetstorm
packetstorm
Java Applet ProviderSkeleton Insecure Invoke Method
2013-06-27 00:00:00
checkpoint_advisories
checkpoint_advisories
Java Applet ProviderSkeleton Class Insecure Invoke Method (CVE-2013-2460)
2013-07-10 00:00:00
Oracle Java sun.tracing.ProviderSkeleton Sandbox Bypass Code Execution - Ver2 (CVE-2013-2460)
2014-03-31 00:00:00
metasploit
metasploit
Java Applet ProviderSkeleton Insecure Invoke Method
2013-06-24 06:04:38
ubuntucve
ubuntucve
CVE-2013-2460
2013-06-18 00:00:00
saint
saint
Oracle Java Serviceability Subcomponent ProviderSkeleton Class Vulnerability
2013-07-11 00:00:00
Oracle Java Serviceability Subcomponent ProviderSkeleton Class Vulnerability
2013-07-11 00:00:00
Oracle Java Serviceability Subcomponent ProviderSkeleton Class Vulnerability
2013-07-11 00:00:00
symantec
symantec
Oracle Java SE CVE-2013-2460 Remote Java Runtime Environment Vulnerability
2013-06-18 00:00:00
veracode
veracode
Sandbox Restrictions Bypass
2019-05-02 04:45:32
cvelist
cvelist
CVE-2013-2460
2013-06-18 22:00:00
seebug
seebug
Java Applet ProviderSkeleton Insecure Invoke Method
2014-07-01 00:00:00
prion
prion
Improper access control
2013-06-18 22:55:00
nvd
nvd
CVE-2013-2460
2013-06-18 22:55:02
exploitdb
exploitdb
Java Applet - ProviderSkeleton Insecure Invoke Method (Metasploit)
2013-07-01 00:00:00
openvas
openvas
Oracle Java SE Multiple Vulnerabilities -01 June 13 (Windows)
2013-06-24 00:00:00
Oracle Java SE Multiple Vulnerabilities -01 (Jun 2013) - Windows
2013-06-24 00:00:00
Mageia: Security Advisory (MGASA-2013-0185)
2022-01-28 00:00:00
oraclelinux
oraclelinux
java-1.7.0-openjdk security update
2013-06-19 00:00:00
java-1.7.0-openjdk security update
2013-06-19 00:00:00
nessus
nessus
CentOS 5 : java-1.7.0-openjdk (CESA-2013:0958)
2013-06-21 00:00:00
Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2013-204)
2013-09-04 00:00:00
RHEL 5 : java-1.7.0-openjdk (RHSA-2013:0958)
2013-06-20 00:00:00
mageia
mageia
Updated java-1.7.0-openjdk packages fix multiple security vulnerabilities
2013-06-26 22:13:26
redhat
redhat
(RHSA-2013:0957) Critical: java-1.7.0-openjdk security update
2013-06-19 00:00:00
(RHSA-2013:0958) Important: java-1.7.0-openjdk security update
2013-06-19 00:00:00
(RHSA-2013:0963) Critical: java-1.7.0-oracle security update
2013-06-20 00:00:00
centos
centos
java security update
2013-06-20 06:43:01
java security update
2013-06-20 06:46:44
amazon
amazon
Important: java-1.7.0-openjdk
2013-06-20 14:14:00
suse
suse
Security update for java-1_7_0-openjdk (important)
2013-07-25 16:04:14
Security update for java-1_7_0-ibm (important)
2013-07-25 20:04:17
Security update for java-1_7_0-ibm (important)
2013-07-25 20:04:26
debian
debian
[SECURITY] [DSA 2722-1] openjdk-7 security update
2013-07-15 15:52:23
ubuntu
ubuntu
OpenJDK 7 vulnerabilities
2013-07-16 00:00:00
IcedTea Web update
2013-07-16 00:00:00
ibm
ibm
Security Bulletin: Flex System Manager (FSM) – June 2013 Java Vulnerabilities
2022-05-16 16:03:13
Security Bulletin: Potential security vulnerabilities with JavaTM SDKs
2022-09-25 21:06:56
Security Bulletin: IBM Tivoli Composite Application Manager for Transactions affected by vulnerabilities in IBM JRE (Multiple CVEs)
2022-09-25 21:06:56
securityvulns
securityvulns
Oracle Java multiple security vulnerabilities
2013-08-28 00:00:00
gentoo
gentoo
IcedTea JDK: Multiple vulnerabilities
2014-06-29 00:00:00
Oracle JRE/JDK: Multiple vulnerabilities
2014-01-27 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.968 High

EPSS

Percentile

99.7%

JSON
Related for CVE-2013-2460
thn1packetstorm1checkpoint_advisories2metasploit1ubuntucve1saint4symantec1veracode1cvelist1seebug1prion1nvd1exploitdb1openvas24oraclelinux2nessus29mageia1redhat4centos2amazon1suse3debian1ubuntu2ibm14securityvulns1gentoo2