CVE-2013-0431
- State
- Published
- Severity
- 3.7 Low
- Published
- Jan 31, 2013
- Updated
- Oct 1, 2026
- Reserved
- Dec 7, 2012
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.7 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | CISA-ADP |
Weaknesses
- CWE-693 Protection Mechanism Failure
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- oval:org.mitre.oval:def:19418vdb-entrysignature
- GLSA-201406-32vendor-advisory
- MDVSA-2013:095vendor-advisory
- http://www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717
- TA13-032Athird-party-advisory
- 20130118 [SE-2012-01] Java 7 Update 11 confirmed to be vulnerablemailing-list
- VU#858729third-party-advisory
- RHSA-2013:0237vendor-advisory
- HPSBUX02857vendor-advisory
- RHSA-2013:0247vendor-advisory
- http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/
- 20130122 Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerablemailing-list
- HPSBMU02874vendor-advisory
- http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53
- openSUSE-SU-2013:0377vendor-advisory
- 20130122 Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerablemailing-list
- oval:org.mitre.oval:def:16579vdb-entrysignature
- http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.html
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-0431government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.