HackerFeeds
All CVEs

CVE-2013-0431

LOW3.7
CISA KEV

Published 2013-01-31 · Updated 2026-10-02 · Source secalert_us@oracle.com

Summary

CVE-2013-0431 is a low-severity (CVSS 3.7) vulnerability in Oracle Java Runtime Environment (JRE). CISA added it to the Known Exploited Vulnerabilities catalog on May 25, 2022, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by June 15, 2022. CISA also lists it as known to be used in ransomware campaigns, so it should be prioritised accordingly. Oracle has 46 vulnerabilities in the KEV catalog, 13 of them linked to ransomware.

All 46 known-exploited Oracle vulnerabilities →

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.

CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-693

CISA Known-Exploited Vulnerability

Product: Oracle — Java Runtime Environment (JRE)

Name: Oracle JRE Sandbox Bypass Vulnerability

Date added: 2022-05-25 · Due: 2022-06-15

USED IN RANSOMWARE

Required action: Apply updates per vendor instructions.

References

View on NVD