CVE-2013-0431

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.

Affected products

Centos, Hp-Ux, Java Platform, Java Runtime Environment, Openjdk, Red Hat, Suse

Oracle Jre

= 1.7.0

Fix

Available

CVSS 3.1

5.3 MEDIUM

EPSS

90.0% (100th percentile)

Weakness

CWE-693

NVD status

Analyzed

Published

2013-01-31