CVE-2013-1571: oracle javafx

Modified

AliasesopenSUSE-SU-2024:10051-1CGA-25fg-5h4w-r562CGA-2m7q-5prh-8fq3+30 more

Published 18-06-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-1571 is a medium (CVSS 4.3) vulnerability in oracle javafx. EPSS estimates a 66.92% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 4.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

66.92%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 16 · Related 5

Timeline

18-06-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

66.92%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

No change 0.00 pp

From 66.92% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

referenceUnverified
Exploit Reference (hg.openjdk.java.net)
Maturity: unknown

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Chainguard16 products

openjdk-11-openj9-default-policy< 0.53.0-r0
openjdk-17-openj9-default-policy< 0.53.0-r0
openjdk-21-openj9-default-policy< 0.48.0-r2
openjdk-25-openj9< 0.59.0-r1
openjdk-25-openj9-dbg< 0.59.0-r1

Show all 16

Oracle3 products

javafx≤ 2.2.21 | 2.0 | 2.0.2 | 2.0.3 | 2.1 | 2.2 | 2.2.3 | 2.2.4 | 2.2.5 | 2.2.7
jdk≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9 | ≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update39 | 1.5.0:update40 | 1.5.0:update41
jre≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update39 | 1.5.0:update40 | 1.5.0:update41 | ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update2 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9 | ≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43

Sun2 products

jdk1.6.0 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update1 | 1.6.0:update1_b06 | 1.6.0:update2 | 1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update11_b03 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update7_b03 | 1.5.0:update8 | 1.5.0:update9
jre1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update_1 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_2 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update_9

Opensuse1 product

ant&distro=openSUSE Tumbleweed< 1.9.6-2.3

4 vendors · 22 products

References

39 links

rhn.redhat.com/errata/RHSA-2013-1060.htmlVendor AdvisoryX Refsource REDHAT
marc.info?l=bugtraq&m=137545592101387&w=2Vendor AdvisoryX Refsource HP
access.redhat.com/errata/RHSA-2014:0414Vendor AdvisoryX Refsource REDHAT
security.gentoo.org/glsa/glsa-201406-32.xmlVendor AdvisoryX Refsource GENTOO
www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.htmlX Refsource CONFIRMVendor Advisory
lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.htmlVendor AdvisoryX Refsource SUSE
bugzilla.redhat.com/show_bug.cgi?id=973474X Refsource CONFIRMPatch
marc.info?l=bugtraq&m=137545505800971&w=2Vendor AdvisoryX Refsource HP
secunia.com/advisories/54154Third Party AdvisoryX Refsource SECUNIAVendor Advisory
rhn.redhat.com/errata/RHSA-2013-1455.htmlVendor AdvisoryX Refsource REDHAT

Show all 39 references

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880Vendor AdvisoryX Refsource HP
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17215VDB EntrySignatureX Refsource OVAL
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19518VDB EntrySignatureX Refsource OVAL
lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2013-1059.htmlVendor AdvisoryX Refsource REDHAT
www-01.ibm.com/support/docview.wss?uid=swg21644197X Refsource CONFIRM
www.kb.cert.org/vuls/id/225657Third Party AdvisoryX Refsource CERT VNUS Government Resource
lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/bid/60634VDB EntryX Refsource BID
hg.openjdk.java.net/jdk7u/jdk7u-dev/langtools/rev/17ee569d0c01X Refsource MISCExploitPatch
rhn.redhat.com/errata/RHSA-2013-1081.htmlVendor AdvisoryX Refsource REDHAT
www.us-cert.gov/ncas/alerts/TA13-169AThird Party AdvisoryX Refsource CERTUS Government Resource
advisories.mageia.org/MGASA-2013-0185.htmlX Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2013-0963.htmlVendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2013-1456.htmlVendor AdvisoryX Refsource REDHAT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19667VDB EntrySignatureX Refsource OVAL
www.mandriva.com/security/advisories?name=MDVSA-2013:183Vendor AdvisoryX Refsource MANDRIVA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19718VDB EntrySignatureX Refsource OVAL
www-01.ibm.com/support/docview.wss?uid=swg21642336X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.htmlVendor AdvisoryX Refsource SUSE
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
lists.apache.org/thread.html/…Mailing ListX Refsource MLIST
www.suse.com/security/cve/CVE-2013-1571WEB