CVE-2013-5456: ibm java

EPSS trend

Probability

6.03%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 6.03% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.03%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

www-01.ibm.com/support/docview.wss?uid=swg1IV51329Vendor AdvisoryX Refsource AIXAPAR
exchange.xforce.ibmcloud.com/vulnerabilities/88255VDB EntryX Refsource XF
www-01.ibm.com/support/docview.wss?uid=swg21655202X Refsource CONFIRMVendor Advisory
lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.htmlVendor AdvisoryX Refsource SUSE
www-01.ibm.com/support/docview.wss?uid=swg21655201X Refsource CONFIRMVendor Advisory
www.security-explorations.com/materials/SE-2012-01-IBM-3.pdfX Refsource MISC
www.ibm.com/developerworks/java/jdk/alerts/X Refsource CONFIRMVendor Advisory
rhn.redhat.com/errata/RHSA-2013-1507.htmlVendor AdvisoryX Refsource REDHAT
www.security-explorations.com/materials/SE-2012-01-IBM-5.pdfX Refsource MISC
secunia.com/advisories/56338Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2013-0485ibmjava2.44%12y ago21-01-2014 18:00Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries.CVE-2013-4041ibmjava2.81%12y ago24-11-2013 18:00Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.CVE-2013-4002apachexerces2_java+13224.74%13y ago23-07-2013 10:00XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.CVE-2013-5375ibmjava2.81%12y ago24-11-2013 18:00Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL.CVE-2013-3011ibmjava4.44%13y ago23-07-2013 10:00Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3012.CVE-2013-3009ibmjava4.38%13y ago23-07-2013 10:00The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to the AccessController doPrivileged block.

All vulnerabilities injava

CVE-2013-5456: ibm java

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References