Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-1926
HistoryApr 29, 2013 - 10:55 p.m.

CVE-2013-1926

2013-04-2922:55:08
[email protected]
web.nvd.nist.gov
6

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0.004

Percentile

75.0%

JSON

The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensitive information or possibly alter other applets via a crafted applet.

Affected configurations

Nvd
Node
redhaticedtea-webRange≤1.2.2
OR
redhaticedtea-webMatch1.0
OR
redhaticedtea-webMatch1.0.1
OR
redhaticedtea-webMatch1.0.2
OR
redhaticedtea-webMatch1.0.3
OR
redhaticedtea-webMatch1.0.4
OR
redhaticedtea-webMatch1.0.5
OR
redhaticedtea-webMatch1.0.6
OR
redhaticedtea-webMatch1.1
OR
redhaticedtea-webMatch1.1.1
OR
redhaticedtea-webMatch1.1.2
OR
redhaticedtea-webMatch1.1.3
OR
redhaticedtea-webMatch1.1.4
OR
redhaticedtea-webMatch1.1.5
OR
redhaticedtea-webMatch1.1.6
OR
redhaticedtea-webMatch1.1.7
OR
redhaticedtea-webMatch1.2
OR
redhaticedtea-webMatch1.2.1
OR
redhaticedtea-webMatch1.3
OR
redhaticedtea-webMatch1.3.1
Node
canonicalubuntu_linuxMatch10.04-lts
OR
canonicalubuntu_linuxMatch11.10
OR
canonicalubuntu_linuxMatch12.04-lts
OR
canonicalubuntu_linuxMatch12.10
Node
opensuseopensuseMatch12.2
VendorProductVersionCPE
redhaticedtea-web*cpe:2.3:a:redhat:icedtea-web:*:*:*:*:*:*:*:*
redhaticedtea-web1.0cpe:2.3:a:redhat:icedtea-web:1.0:*:*:*:*:*:*:*
redhaticedtea-web1.0.1cpe:2.3:a:redhat:icedtea-web:1.0.1:*:*:*:*:*:*:*
redhaticedtea-web1.0.2cpe:2.3:a:redhat:icedtea-web:1.0.2:*:*:*:*:*:*:*
redhaticedtea-web1.0.3cpe:2.3:a:redhat:icedtea-web:1.0.3:*:*:*:*:*:*:*
redhaticedtea-web1.0.4cpe:2.3:a:redhat:icedtea-web:1.0.4:*:*:*:*:*:*:*
redhaticedtea-web1.0.5cpe:2.3:a:redhat:icedtea-web:1.0.5:*:*:*:*:*:*:*
redhaticedtea-web1.0.6cpe:2.3:a:redhat:icedtea-web:1.0.6:*:*:*:*:*:*:*
redhaticedtea-web1.1cpe:2.3:a:redhat:icedtea-web:1.1:*:*:*:*:*:*:*
redhaticedtea-web1.1.1cpe:2.3:a:redhat:icedtea-web:1.1.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 251

References

Related

prion 1
debiancve 1
cvelist 1
ubuntucve 1
veracode 2
cve 1
openvas 15
ubuntu 2
nessus 16
redhat 1
centos 1
securityvulns 2
oraclelinux 1
fedora 4
suse 2
prion
prion
Design/Logic Flaw
2013-04-29 22:55:00
debiancve
debiancve
CVE-2013-1926
2013-04-29 22:55:08
cvelist
cvelist
CVE-2013-1926
2013-04-29 22:00:00
ubuntucve
ubuntucve
CVE-2013-1926
2013-04-17 00:00:00
veracode
veracode
Information Disclosure
2019-01-15 08:52:10
Arbitrary Code Execution
2019-05-02 04:44:40
cve
cve
CVE-2013-1926
2013-04-29 22:55:08
openvas
openvas
Fedora Update for icedtea-web FEDORA-2013-5962
2013-04-19 00:00:00
Ubuntu: Security Advisory (USN-1804-1)
2013-04-19 00:00:00
Ubuntu: Security Advisory (USN-1804-2)
2013-04-25 00:00:00
ubuntu
ubuntu
IcedTea-Web vulnerabilities
2013-04-18 00:00:00
IcedTea-Web regression
2013-04-23 00:00:00
nessus
nessus
Fedora 17 : icedtea-web-1.3.2-0.fc17 (2013-5925)
2013-04-20 00:00:00
openSUSE Security Update : icedtea-web (openSUSE-SU-2013:0897-1)
2014-06-13 00:00:00
Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : icedtea-web vulnerabilities (USN-1804-1)
2013-04-19 00:00:00
redhat
redhat
(RHSA-2013:0753) Moderate: icedtea-web security update
2013-04-17 00:00:00
centos
centos
icedtea security update
2013-04-17 22:33:18
securityvulns
securityvulns
[USN-1804-1] IcedTea-Web vulnerabilities
2013-04-22 00:00:00
IcedTea-Web security vulnerabilities
2013-04-22 00:00:00
oraclelinux
oraclelinux
icedtea-web security update
2013-04-17 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: icedtea-web-1.3.2-0.fc19
2013-04-25 14:16:11
[SECURITY] Fedora 18 Update: icedtea-web-1.3.2-0.fc18
2013-04-18 02:48:19
[SECURITY] Fedora 18 Update: icedtea-web-1.4.1-0.fc18
2013-10-04 01:58:51
suse
suse
Security update for icedtea-web (important)
2013-07-10 19:04:21
Security update for icedtea-web (important)
2013-05-31 19:04:15

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

AI Score

6.2

Confidence

Low

EPSS

0.004

Percentile

75.0%

JSON
Related for NVD:CVE-2013-1926
prion1debiancve1cvelist1ubuntucve1veracode2cve1openvas15ubuntu2nessus16redhat1centos1securityvulns2oraclelinux1fedora4suse2