CVE-2013-5797: oracle javafx

CVSS: 3.5v2.0LowModified

AliasesCGA-299m-x26q-h8wgCGA-2h6h-fx7g-vhffCGA-4j6f-997x-ghm8+29 more

Published 16-10-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-5797 is a low (CVSS 3.5) vulnerability in oracle javafx. EPSS estimates a 2.63% chance of exploitation in the next 30 days, higher than 85.2% of scored vulnerabilities.

Overall risk

15/100

0100

Low · default modelHow is this calculated?

CVSS score

3.5/10

010

Low · v2.0 (NVD)

EPSS score

2.63%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 5

MGASA-2013-0322 MGASA-2013-0323 OPENSUSE-SU-2024:10534-1 RHSA-2013:1440 RHSA-2013:1447 RHSA-2013:1451+10 more

Timeline

16-10-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and JavaFX 2.2.40 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.

CVSS metrics

1 score · 1 source · 1 version

v2.03.5

EPSS trend

Probability

2.63%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

0.00 pp

From 2.63% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.63%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Chainguard16 products

openjdk-11-openj9-default-policy< 0.53.0-r0
openjdk-17-openj9-default-policy< 0.53.0-r0
openjdk-21-openj9-default-policy< 0.48.0-r2
openjdk-25-openj9< 0.59.0-r1
openjdk-25-openj9-dbg< 0.59.0-r1

Show all 16

Oracle4 products

javafx≤ 2.2.40 | 2.0 | 2.0.2 | 2.0.3 | 2.1 | 2.2 | 2.2.3 | 2.2.4 | 2.2.5 | 2.2.7 | 2.2.21
jdk≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45 | ≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update45 | 1.6.0:update51 | ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update25 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9
jre≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update45 | 1.6.0:update51 | ≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update25 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9 | ≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45
jrockit≤ r28.2.8 | r28.0.0 | r28.0.1 | r28.0.2 | r28.1.0 | r28.1.1 | r28.1.3 | r28.1.4 | r28.1.5 | r28.2.2 | r28.2.3 | r28.2.4 | r28.2.5 | r28.2.6 | ≤ r27.7.6 | r27.7.1 | r27.7.2 | r27.7.3 | r27.7.4 | r27.7.5

Sun2 products

jdk1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update11_b03 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update7_b03 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update1 | 1.6.0:update1_b06 | 1.6.0:update2
jre1.6.0 | 1.6.0:update_1 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_2 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update_9 | 1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9

3 vendors · 22 products

References

25 links

www.securityfocus.com/bid/63095VDB EntryX Refsource BID
access.redhat.com/errata/RHSA-2014:0414Vendor AdvisoryX Refsource REDHAT
security.gentoo.org/glsa/glsa-201406-32.xmlVendor AdvisoryX Refsource GENTOO
rhn.redhat.com/errata/RHSA-2013-1447.htmlVendor AdvisoryX Refsource REDHAT
rhn.redhat.com/errata/RHSA-2013-1440.htmlVendor AdvisoryX Refsource REDHAT
www.ubuntu.com/usn/USN-2033-1Vendor AdvisoryX Refsource UBUNTU
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18956VDB EntrySignatureX Refsource OVAL
www.ubuntu.com/usn/USN-2089-1Vendor AdvisoryX Refsource UBUNTU
rhn.redhat.com/errata/RHSA-2013-1508.htmlVendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.htmlVendor AdvisoryX Refsource SUSE

Show all 25 references

bugzilla.redhat.com/show_bug.cgi?id=1018720X Refsource CONFIRM
marc.info?l=bugtraq&m=138674073720143&w=2Vendor AdvisoryX Refsource HP
rhn.redhat.com/errata/RHSA-2013-1505.htmlVendor AdvisoryX Refsource REDHAT
www-01.ibm.com/support/docview.wss?uid=swg21655201X Refsource CONFIRM
marc.info?l=bugtraq&m=138674031212883&w=2Vendor AdvisoryX Refsource HP
lists.opensuse.org/opensuse-updates/2013-11/msg00023.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2013-1793.htmlVendor AdvisoryX Refsource REDHAT
rhn.redhat.com/errata/RHSA-2013-1509.htmlVendor AdvisoryX Refsource REDHAT
www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlX Refsource CONFIRMVendor Advisory
lists.apple.com/archives/security-announce/2013/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLE
rhn.redhat.com/errata/RHSA-2013-1507.htmlVendor AdvisoryX Refsource REDHAT
support.apple.com/kb/HT5982X Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2013-1451.htmlVendor AdvisoryX Refsource REDHAT
www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.htmlX Refsource CONFIRM

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities