CVE-2013-5804: oracle jdk

CVSS: 6.4v2.0MediumModified

AliasesCGA-228j-x8ww-3xr5CGA-2298-gxj5-2hh8CGA-2jv8-28xr-gx62+29 more

Published 16-10-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-5804 is a medium (CVSS 6.4) vulnerability in oracle jdk. EPSS estimates a 3.93% chance of exploitation in the next 30 days, higher than 90.2% of scored vulnerabilities.

Overall risk

26/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.4/10

010

Medium · v2.0 (NVD)

EPSS score

3.93%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 12 · Related 5

MGASA-2013-0322 MGASA-2013-0323 OPENSUSE-SU-2024:10534-1 RHSA-2013:1440 RHSA-2013:1447 RHSA-2013:1451+10 more

Timeline

16-10-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Javadoc.

CVSS metrics

1 score · 1 source · 1 version

v2.06.4

EPSS trend

Probability

3.93%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

0.00 pp

From 3.93% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.93%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Chainguard16 products

openjdk-11-openj9-default-policy< 0.53.0-r0
openjdk-17-openj9-default-policy< 0.53.0-r0
openjdk-21-openj9-default-policy< 0.48.0-r2
openjdk-25-openj9< 0.59.0-r1
openjdk-25-openj9-dbg< 0.59.0-r1

Show all 16

Oracle3 products

jdk≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45 | ≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update45 | 1.6.0:update51
jre≤ 1.7.0 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update11 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update25 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9 | ≤ 1.6.0 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update45 | 1.6.0:update51 | ≤ 1.5.0 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45
jrockit≤ r28.2.8 | r28.0.0 | r28.0.1 | r28.0.2 | r28.1.0 | r28.1.1 | r28.1.3 | r28.1.4 | r28.1.5 | r28.2.2 | r28.2.3 | r28.2.4 | r28.2.5 | r28.2.6 | ≤ r27.7.6 | r27.7.1 | r27.7.2 | r27.7.3 | r27.7.4 | r27.7.5

Sun2 products

jdk1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update11_b03 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update7_b03 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update1 | 1.6.0:update1_b06 | 1.6.0:update2
jre1.6.0 | 1.6.0:update_1 | 1.6.0:update_10 | 1.6.0:update_11 | 1.6.0:update_12 | 1.6.0:update_13 | 1.6.0:update_14 | 1.6.0:update_15 | 1.6.0:update_16 | 1.6.0:update_17 | 1.6.0:update_18 | 1.6.0:update_19 | 1.6.0:update_2 | 1.6.0:update_20 | 1.6.0:update_21 | 1.6.0:update_3 | 1.6.0:update_4 | 1.6.0:update_5 | 1.6.0:update_6 | 1.6.0:update_7 | 1.6.0:update_9 | 1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update31 | 1.5.0:update33 | 1.5.0:update4 | 1.5.0:update5 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9

3 vendors · 21 products

References

25 links

bugzilla.redhat.com/show_bug.cgi?id=1019131X Refsource CONFIRM
www.securityfocus.com/bid/63149VDB EntryX Refsource BID
access.redhat.com/errata/RHSA-2014:0414Vendor AdvisoryX Refsource REDHAT
security.gentoo.org/glsa/glsa-201406-32.xmlVendor AdvisoryX Refsource GENTOO
rhn.redhat.com/errata/RHSA-2013-1447.htmlVendor AdvisoryX Refsource REDHAT
rhn.redhat.com/errata/RHSA-2013-1440.htmlVendor AdvisoryX Refsource REDHAT
www.ubuntu.com/usn/USN-2033-1Vendor AdvisoryX Refsource UBUNTU
www.ubuntu.com/usn/USN-2089-1Vendor AdvisoryX Refsource UBUNTU
rhn.redhat.com/errata/RHSA-2013-1508.htmlVendor AdvisoryX Refsource REDHAT
lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.htmlVendor AdvisoryX Refsource SUSE

Show all 25 references

marc.info?l=bugtraq&m=138674073720143&w=2Vendor AdvisoryX Refsource HP
rhn.redhat.com/errata/RHSA-2013-1505.htmlVendor AdvisoryX Refsource REDHAT
www-01.ibm.com/support/docview.wss?uid=swg21655201X Refsource CONFIRM
marc.info?l=bugtraq&m=138674031212883&w=2Vendor AdvisoryX Refsource HP
lists.opensuse.org/opensuse-updates/2013-11/msg00023.htmlVendor AdvisoryX Refsource SUSE
lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.htmlVendor AdvisoryX Refsource SUSE
rhn.redhat.com/errata/RHSA-2013-1793.htmlVendor AdvisoryX Refsource REDHAT
rhn.redhat.com/errata/RHSA-2013-1509.htmlVendor AdvisoryX Refsource REDHAT
www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlX Refsource CONFIRMVendor Advisory
lists.apple.com/archives/security-announce/2013/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLE
rhn.redhat.com/errata/RHSA-2013-1507.htmlVendor AdvisoryX Refsource REDHAT
support.apple.com/kb/HT5982X Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2013-1451.htmlVendor AdvisoryX Refsource REDHAT
www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.htmlX Refsource CONFIRM
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19188VDB EntrySignatureX Refsource OVAL

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities