CVE-2013-5843: oracle javafx

CVSS: 10.0v2.0HighModified

Published 16-10-2013Last modified 06-08-2024

Vulnerability summary

CVE-2013-5843 is a high (CVSS 10.0) vulnerability in oracle javafx. EPSS estimates a 6.13% chance of exploitation in the next 30 days, higher than 93.3% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

6.13%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

RHSA-2013:1440 RHSA-2013:1507 RHSA-2013:1508 RHSA-2013:1509 RHSA-2013:1793 RHSA-2014:0414

Timeline

16-10-2013
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JavaFX 2.2.40 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

6.13%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 6.13% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.13%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat5 products

Oracle3 products

javafx≤ 2.2.40
jdk1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update30 | 1.5.0:update31 | 1.5.0:update32 | 1.5.0:update33 | 1.5.0:update34 | 1.5.0:update35 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update39 | 1.5.0:update4 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45 | 1.5.0:update5 | 1.5.0:update51 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update1 | 1.6.0:update10 | 1.6.0:update11 | 1.6.0:update12 | 1.6.0:update13 | 1.6.0:update14 | 1.6.0:update15 | 1.6.0:update16 | 1.6.0:update17 | 1.6.0:update18 | 1.6.0:update19 | 1.6.0:update2 | 1.6.0:update20 | 1.6.0:update21 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update3 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update32_b31 | 1.6.0:update32_b32 | 1.6.0:update33 | 1.6.0:update33_b31 | 1.6.0:update33_b32 | 1.6.0:update33_b33 | 1.6.0:update34 | 1.6.0:update34_b31 | 1.6.0:update34_b32 | 1.6.0:update35 | 1.6.0:update35_b31 | 1.6.0:update35_b32 | 1.6.0:update37 | 1.6.0:update37_b31 | 1.6.0:update37_b32 | 1.6.0:update38 | 1.6.0:update38_b31 | 1.6.0:update39 | 1.6.0:update4 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update43_b31 | 1.6.0:update45 | 1.6.0:update5 | 1.6.0:update51 | 1.6.0:update51_b31 | 1.6.0:update51_b32 | 1.6.0:update6 | 1.6.0:update60 | 1.6.0:update7 | 1.6.0:update8 | 1.6.0:update9 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update10_b31 | 1.7.0:update11 | 1.7.0:update11_b32 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update17_b31 | 1.7.0:update17_b32 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update21_b31 | 1.7.0:update25 | 1.7.0:update25_b33 | 1.7.0:update25_b34 | 1.7.0:update25_b35 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update40 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update9
jre1.5.0 | 1.5.0:update1 | 1.5.0:update10 | 1.5.0:update11 | 1.5.0:update12 | 1.5.0:update13 | 1.5.0:update14 | 1.5.0:update15 | 1.5.0:update16 | 1.5.0:update17 | 1.5.0:update18 | 1.5.0:update19 | 1.5.0:update2 | 1.5.0:update20 | 1.5.0:update21 | 1.5.0:update22 | 1.5.0:update23 | 1.5.0:update24 | 1.5.0:update25 | 1.5.0:update26 | 1.5.0:update27 | 1.5.0:update28 | 1.5.0:update29 | 1.5.0:update3 | 1.5.0:update30 | 1.5.0:update31 | 1.5.0:update32 | 1.5.0:update33 | 1.5.0:update34 | 1.5.0:update35 | 1.5.0:update36 | 1.5.0:update38 | 1.5.0:update39 | 1.5.0:update4 | 1.5.0:update40 | 1.5.0:update41 | 1.5.0:update45 | 1.5.0:update5 | 1.5.0:update51 | 1.5.0:update6 | 1.5.0:update7 | 1.5.0:update8 | 1.5.0:update9 | 1.6.0 | 1.6.0:update1 | 1.6.0:update10 | 1.6.0:update11 | 1.6.0:update12 | 1.6.0:update13 | 1.6.0:update14 | 1.6.0:update15 | 1.6.0:update16 | 1.6.0:update17 | 1.6.0:update18 | 1.6.0:update19 | 1.6.0:update2 | 1.6.0:update20 | 1.6.0:update21 | 1.6.0:update22 | 1.6.0:update23 | 1.6.0:update24 | 1.6.0:update25 | 1.6.0:update26 | 1.6.0:update27 | 1.6.0:update29 | 1.6.0:update3 | 1.6.0:update30 | 1.6.0:update31 | 1.6.0:update32 | 1.6.0:update33 | 1.6.0:update34 | 1.6.0:update35 | 1.6.0:update37 | 1.6.0:update38 | 1.6.0:update39 | 1.6.0:update4 | 1.6.0:update41 | 1.6.0:update43 | 1.6.0:update45 | 1.6.0:update5 | 1.6.0:update51 | 1.6.0:update6 | 1.6.0:update60 | 1.6.0:update7 | 1.6.0:update8 | 1.6.0:update9 | 1.7.0 | 1.7.0:update1 | 1.7.0:update10 | 1.7.0:update10_b31 | 1.7.0:update11 | 1.7.0:update11_b32 | 1.7.0:update13 | 1.7.0:update15 | 1.7.0:update17 | 1.7.0:update17_b31 | 1.7.0:update17_b32 | 1.7.0:update2 | 1.7.0:update21 | 1.7.0:update21_b31 | 1.7.0:update25 | 1.7.0:update25_b33 | 1.7.0:update25_b34 | 1.7.0:update25_b35 | 1.7.0:update3 | 1.7.0:update4 | 1.7.0:update40 | 1.7.0:update5 | 1.7.0:update6 | 1.7.0:update7 | 1.7.0:update7_b32 | 1.7.0:update9 | 1.7.0:update9_b31 | 1.7.0:update9_b32

2 vendors · 8 products

References

17 links

access.redhat.com/errata/RHSA-2014:0414Vendor AdvisoryX Refsource REDHATThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1440.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19144VDB EntrySignatureX Refsource OVALBroken Link
rhn.redhat.com/errata/RHSA-2013-1508.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.htmlVendor AdvisoryX Refsource SUSEBroken Link
marc.info?l=bugtraq&m=138674073720143&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
www-01.ibm.com/support/docview.wss?uid=swg21655201X Refsource CONFIRMThird Party Advisory
marc.info?l=bugtraq&m=138674031212883&w=2Vendor AdvisoryX Refsource HPIssue TrackingMailing ListThird Party Advisory
rhn.redhat.com/errata/RHSA-2013-1793.htmlVendor AdvisoryX Refsource REDHATBroken Link
rhn.redhat.com/errata/RHSA-2013-1509.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory

Show all 17 references

www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.htmlX Refsource CONFIRMVendor Advisory
lists.apple.com/archives/security-announce/2013/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLEBroken LinkMailing List
rhn.redhat.com/errata/RHSA-2013-1507.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.securityfocus.com/bid/63151VDB EntryX Refsource BIDThird Party Advisory
support.apple.com/kb/HT5982X Refsource CONFIRMThird Party Advisory
secunia.com/advisories/56338Third Party AdvisoryX Refsource SECUNIANot Applicable
www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS13-025/index.htmlX Refsource CONFIRMThird Party Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities