CVE-2013-0422

CISA KEV RANSOMWARE
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.

CISA Known Exploited Vulnerability

Vendor / Product Oracle — Java Runtime Environment (JRE)
Date Added 2022-05-25
Remediation Due 2022-06-15
Ransomware Use CONFIRMED
https://nvd.nist.gov/vuln/detail/CVE-2013-0422

Weakness Classification (1)

Affected Software (22)

VendorProductVersion
canonical ubuntu_linux 12.10
opensuse opensuse 12.2
oracle jdk 1.7.0
oracle jdk 1.7.0
oracle jdk 1.7.0
oracle jdk 1.7.0
oracle jdk 1.7.0
oracle jdk 1.7.0
oracle jdk 1.7.0
oracle jdk 1.7.0
oracle jdk 1.7.0
oracle jdk 1.7.0
oracle jre 1.7.0
oracle jre 1.7.0
oracle jre 1.7.0
oracle jre 1.7.0
oracle jre 1.7.0
oracle jre 1.7.0
oracle jre 1.7.0
oracle jre 1.7.0
oracle jre 1.7.0
oracle jre 1.7.0

References & Advisories (20)

http://www.kb.cert.org/vuls/id/625617
Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA13-010A.html
Third Party Advisory US Government Resource
http://seclists.org/bugtraq/2013/Jan/48
Mailing List Third Party Advisory

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →