CVE-2013-1561: oracle javafx
CVSS: 5.0v2.0MediumModified
AliasesCGA-2hw8-35mw-wmgvCGA-2m37-qj22-p8qhCGA-4qmq-42mf-c5hfCGA-5cfv-93pp-43qjCGA-5gvp-4mhf-fj45CGA-5jc3-xjh5-m8h3CGA-5vfp-72wc-64qxCGA-6c44-992w-g5c3CGA-6wrx-734q-gc54CGA-7483-c8hq-3jpcCGA-7gj9-jw9w-mxg5CGA-7qxh-mfmf-x7q7CGA-9968-77jg-vc95CGA-c83m-7jpr-h9wwCGA-ccq6-76qj-m9jmCGA-f2wr-9v8v-wh78CGA-fhgm-mwg4-x536CGA-gppp-mj3j-j8fqCGA-gqrj-xrv8-qfw2CGA-gw8x-3pp3-c2r6CGA-jfjj-jgp6-hrv3CGA-jfxh-8cpx-j3r7CGA-jwwq-fc2c-6gqwCGA-p322-75rh-jh47CGA-pwj3-47j9-9cwhCGA-q638-7384-8v89CGA-q9pm-xhj7-cg7vCGA-qwp9-9345-9w6rCGA-rx39-mq62-84cgCGA-v3w7-jwqf-q48xCGA-wmqc-mh6m-7wcrCGA-xxw7-hq8x-9fw5
Published 17-04-2013Last modified 06-08-2024
Vulnerability summary
CVE-2013-1561 is a medium (CVSS 5.0) vulnerability in oracle javafx. EPSS estimates a 2.89% chance of exploitation in the next 30 days, higher than 86.7% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
2.89%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 5Timeline
- 17-04-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
2.89%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.89% on 20-09-2026
20-09-202620-10-2026
EPSS score2.89%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Chainguard16 products
- openjdk-11-openj9-default-policy< 0.53.0-r0
- openjdk-17-openj9-default-policy< 0.53.0-r0
- openjdk-21-openj9-default-policy< 0.48.0-r2
- openjdk-25-openj9< 0.59.0-r1
- openjdk-25-openj9-dbg< 0.59.0-r1
Oracle3 products
- javafx≤ 2.2.7 | 2.0 | 2.0.2 | 2.0.3 | 2.1 | 2.2 | 2.2.3 | 2.2.4 | 2.2.5
- jdk≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9
- jre≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9
2 vendors · 19 products
References
4 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16481VDB EntrySignatureX Refsource OVAL
- www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.htmlX Refsource CONFIRMVendor Advisory