CVE-2013-2427Oracle Javafx vulnerability

7 documents5 sources
Severity
10.0CRITICALNVD
EPSS
2.8%
top 13.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 17
Latest updateMay 17

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2428.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages3 packages

NVDoracle/javafx2.2.7+8
NVDoracle/jdk1.7.0+1
NVDoracle/jre1.7.0+1

🔴Vulnerability Details

2
GHSA
GHSA-4463-4cg8-898f: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 22022-05-17
CVEList
CVE-2013-2427: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 22013-04-17

📋Vendor Advisories

3
Red Hat
JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)2013-04-16
Red Hat
JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)2013-04-16
Red Hat
JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)2013-04-16

💬Community

1
Bugzilla
Oracle JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)2013-04-17
CVE-2013-2427 — Oracle Javafx vulnerability | cvebase