CVE-2013-1564: oracle javafx
CVSS: 5.0v2.0MediumModified
AliasesCGA-23rx-qr43-5h24CGA-2g8w-m7xv-x348CGA-2j7m-m986-jf5wCGA-2mvh-wqmc-3j8rCGA-3w8r-rff4-x9c6CGA-4vc2-jh3x-vm6cCGA-5383-wfrw-793wCGA-8q9m-hgw6-q3hwCGA-9xf3-r5mq-r524CGA-c893-mjqm-6h8mCGA-crcp-x2mj-xw3cCGA-f2rv-h7c5-h33wCGA-fwmj-337v-mrh5CGA-g2c4-j79m-r79wCGA-g79v-9p7f-q6mqCGA-hf2v-gcc9-7g6qCGA-hw89-r3xc-6wfmCGA-j3mc-h5pv-m4j7CGA-j4h4-77ww-624xCGA-j6xx-qxvq-5jmfCGA-mfgw-w7gr-mv9qCGA-p4qv-5xq6-8vj9CGA-pc6p-4c26-cv5qCGA-ppfh-3cjq-6238CGA-qgj5-wq3r-mhgmCGA-rvm3-v225-hwm7CGA-wc3g-hqx4-5w82CGA-wm4r-mr5c-rggxCGA-wr6j-2gfj-52q2CGA-x6vx-x95h-cvj2CGA-xmv9-73x9-hcmxCGA-xvj3-7jmp-p4p7
Published 17-04-2013Last modified 06-08-2024
Vulnerability summary
CVE-2013-1564 is a medium (CVSS 5.0) vulnerability in oracle javafx. EPSS estimates a 2.87% chance of exploitation in the next 30 days, higher than 86.6% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
2.87%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 1 · Related 5Timeline
- 17-04-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect integrity via unknown vectors related to JavaFX.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:P/A:NSourcesSingle source
EPSS trend
Probability
2.87%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
0.00 pp
From 2.87% on 21-09-2026
21-09-202621-10-2026
EPSS score2.87%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Chainguard16 products
- openjdk-11-openj9-default-policy< 0.53.0-r0
- openjdk-17-openj9-default-policy< 0.53.0-r0
- openjdk-21-openj9-default-policy< 0.48.0-r2
- openjdk-25-openj9< 0.59.0-r1
- openjdk-25-openj9-dbg< 0.59.0-r1
Oracle3 products
- javafx≤ 2.2.7 | 2.0 | 2.0.2 | 2.0.3 | 2.1 | 2.2 | 2.2.3 | 2.2.4 | 2.2.5
- jdk≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9
- jre≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9
2 vendors · 19 products
References
4 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16147VDB EntrySignatureX Refsource OVAL
- www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.htmlX Refsource CONFIRMVendor Advisory