CVE-2013-5790: oracle jdk
CVSS: 4.3v2.0MediumModified
AliasesCGA-29wx-m5f9-6h7wCGA-2q9f-qrg8-v77vCGA-3gm6-69v8-jxw4CGA-3v95-vrpf-75g4CGA-4h93-jg4g-xrvpCGA-4xc3-cmcw-2335CGA-5w4x-c56h-3m9cCGA-6348-f62v-mrfvCGA-6rcc-hgjp-cm82CGA-9927-4pqp-jq6hCGA-c8mv-xx56-rqjhCGA-c9xw-233q-wv84CGA-f3q9-7w4h-83cxCGA-gj9x-q77j-3c6wCGA-h6cg-253m-52w7CGA-h73h-vcj3-rj5wCGA-h77r-mq8h-m8qpCGA-hc49-h6qv-mqrqCGA-jxmp-329m-h2xvCGA-m23g-g422-vhfxCGA-m5jm-hr9w-cf84CGA-mx8m-wjwx-g2rgCGA-q69c-5898-9pr6CGA-q7hr-pqjx-qwmgCGA-q83w-cxmv-cp3mCGA-q9pv-7hq7-vm3pCGA-qhjr-367p-fqfhCGA-r69f-chwj-f844CGA-rvph-2c26-42fvCGA-v9pm-8jhr-m382CGA-vc2f-4rxf-g8j4CGA-x455-f59c-p5v7
Published 16-10-2013Last modified 06-08-2024
Vulnerability summary
CVE-2013-5790 is a medium (CVSS 4.3) vulnerability in oracle jdk. EPSS estimates a 3.64% chance of exploitation in the next 30 days, higher than 89.4% of scored vulnerabilities.
CVSS score
4.3/10
010
Medium · v2.0 (NVD)EPSS score
3.64%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 10 · Related 5Timeline
- 16-10-2013PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to BEANS.
CVSS metrics
1 score · 1 source · 1 versionMedium 4.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
3.64%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.64% on 18-09-2026
18-09-202618-10-2026
EPSS score3.64%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Chainguard16 products
- openjdk-11-openj9-default-policy< 0.53.0-r0
- openjdk-17-openj9-default-policy< 0.53.0-r0
- openjdk-21-openj9-default-policy< 0.48.0-r2
- openjdk-25-openj9< 0.59.0-r1
- openjdk-25-openj9-dbg< 0.59.0-r1
Oracle2 products
- jdk≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45 | ≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update45 | 1.6.0:update51 | ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update25 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9
- jre1.7.0:update15 | 1.7.0:update17 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update25 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9 | ≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45 | ≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update45 | 1.6.0:update51 | ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13
Sun2 products
- jdk1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update11_b03 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update7_b03 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update1 | 1.6.0:update1_b06 | 1.6.0:update2
- jre1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update_1 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_2 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update_9
3 vendors · 20 products
References
23 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18733VDB EntrySignatureX Refsource OVAL
Show all 23 references
- www-01.ibm.com/support/docview.wss?uid=swg21655201X Refsource CONFIRM
- www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlX Refsource CONFIRMPatchVendor Advisory
- support.apple.com/kb/HT5982X Refsource CONFIRM