NVD

Id
38517  
Name
CVE-2013-2454  
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via vectors related to JDBC. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue does not properly restrict access to certain class packages in the SerialJavaObject class, which allows remote attackers to bypass the Java sandbox.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-18  
Published
2013-06-18  
Modified Date
2014-10-04  
Seq
2013-2454  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
197211 38517 CVE-2013-2454 http://advisories.mageia.org/MGASA-2013-0185.html  View
197212 38517 CVE-2013-2454 SSRT101305  View
197213 38517 CVE-2013-2454 http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/ec931d812faa  View
197214 38517 CVE-2013-2454 SUSE-SU-2013:1255  View
197215 38517 CVE-2013-2454 SUSE-SU-2013:1256  View
197216 38517 CVE-2013-2454 SUSE-SU-2013:1257  View
197217 38517 CVE-2013-2454 SUSE-SU-2013:1293  View
197218 38517 CVE-2013-2454 SUSE-SU-2013:1305  View
197219 38517 CVE-2013-2454 HPSBUX02907  View
197220 38517 CVE-2013-2454 HPSBUX02908  View
197221 38517 CVE-2013-2454 oval:org.mitre.oval:def:17236  View
197222 38517 CVE-2013-2454 oval:org.mitre.oval:def:19237  View
197223 38517 CVE-2013-2454 oval:org.mitre.oval:def:19407  View
197224 38517 CVE-2013-2454 oval:org.mitre.oval:def:19470  View
197225 38517 CVE-2013-2454 RHSA-2013:0963  View
197226 38517 CVE-2013-2454 RHSA-2013:1059  View
197227 38517 CVE-2013-2454 RHSA-2013:1060  View
197228 38517 CVE-2013-2454 RHSA-2013:1081  View
197229 38517 CVE-2013-2454 RHSA-2013:1455  View
197230 38517 CVE-2013-2454 RHSA-2013:1456  View
197231 38517 CVE-2013-2454 GLSA-201406-32  View
197232 38517 CVE-2013-2454 http://www-01.ibm.com/support/docview.wss?uid=swg21642336  View
197233 38517 CVE-2013-2454 MDVSA-2013:183  View
197234 38517 CVE-2013-2454 http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html  View
197235 38517 CVE-2013-2454 TA13-169A  View
197236 38517 CVE-2013-2454 https://bugzilla.redhat.com/show_bug.cgi?id=975129  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
21476 JVNDB-2013-003051 Oracle Java SE の Java Runtime Environment における JDBC に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、JDBC に関する処理に不備があるため、機密性、および完全性に影響のある脆弱性が存在します。 CVE-2013-2454 62396 CVE-2013-2454 38517 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003051.html 2013-06-18 2015-03-18 View