CVE-2013-3743: oracle jdk
CVSS: 9.3v2.0HighModified
AliasesCGA-2fmx-jm77-qwxfCGA-2rgj-29gg-4whmCGA-4j34-fgcr-gf9gCGA-4jr9-4w3r-j8m6CGA-4v5j-2hvw-mg7mCGA-537w-68wr-356jCGA-55gq-9486-rcqrCGA-5w7v-p43w-xjw4CGA-7649-rqwh-vfw7CGA-87m9-8hp2-76v6CGA-87xq-xwpv-q929CGA-8xh7-5mr2-5233CGA-ccj8-92r7-4pwvCGA-g8qh-mv74-x259CGA-gvr5-qq2h-mcj2CGA-hpqj-wqqv-9fwqCGA-j73h-4gh3-6xf2CGA-jj2x-5gr3-mh7rCGA-jw3f-f943-xw8wCGA-jw72-pwxr-jjp3CGA-m39r-7wxh-9w4xCGA-pv6v-m6cr-q3hhCGA-q365-c92h-579gCGA-qjr7-gvx7-rhqvCGA-qvp7-jjrf-96vhCGA-r4w2-cwqw-wm5xCGA-rc85-fpxj-8qq4CGA-rpjf-pqcf-49mxCGA-vrxx-95h2-2qpqCGA-w7rx-v7pv-jg9wCGA-w88m-7xcq-qw8gCGA-x7m5-f2qh-xxh5
Published 18-06-2013Last modified 06-08-2024
Vulnerability summary
CVE-2013-3743 is a high (CVSS 9.3) vulnerability in oracle jdk. EPSS estimates a 6.08% chance of exploitation in the next 30 days, higher than 93.3% of scored vulnerabilities.
CVSS score
9.3/10
010
High · v2.0 (NVD)EPSS score
6.08%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 5 · Related 5Timeline
- 18-06-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 45 and earlier and 5.0 Update 45 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
CVSS metrics
1 score · 1 source · 1 versionHigh 9.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
6.08%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 6.08% on 19-09-2026
19-09-202619-10-2026
EPSS score6.08%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Chainguard16 products
- openjdk-11-openj9-default-policy< 0.53.0-r0
- openjdk-17-openj9-default-policy< 0.53.0-r0
- openjdk-21-openj9-default-policy< 0.48.0-r2
- openjdk-25-openj9< 0.59.0-r1
- openjdk-25-openj9-dbg< 0.59.0-r1
Oracle2 products
- jdk≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | ≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update39 | 1.5.0:update40 | 1.5.0:update41
- jre≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | ≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update39 | 1.5.0:update40 | 1.5.0:update41
Sun2 products
- jdk1.6.0 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update1 | 1.6.0:update1_b06 | 1.6.0:update2 | 1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update11_b03 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update7_b03 | 1.5.0:update8 | 1.5.0:update9
- jre1.6.0 | 1.6.0:update_1 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_2 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update_9 | 1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9
3 vendors · 20 products
References
24 links- www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.htmlX Refsource CONFIRMVendor Advisory
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880Vendor AdvisoryX Refsource HP
Show all 24 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18758VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19591VDB EntrySignatureX Refsource OVAL
- www-01.ibm.com/support/docview.wss?uid=swg21644197X Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19453VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17202VDB EntrySignatureX Refsource OVAL
- www-01.ibm.com/support/docview.wss?uid=swg21642336X Refsource CONFIRM