CVE-2013-2428
published 2013-04-17CVE-2013-2428: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote…
PriorityP352critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
4.71%
90.9th percentile
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2427.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| oracle | javafx | <= 2.2.7 | — |
| oracle | javafx | — | — |
| oracle | javafx | — | — |
| oracle | javafx | — | — |
| oracle | javafx | — | — |
| oracle | javafx | — | — |
| oracle | javafx | — | — |
| oracle | javafx | — | — |
| oracle | javafx | — | — |
| oracle | jdk | <= 1.7.0 | — |
| oracle | jdk | — | — |
| oracle | jre | <= 1.7.0 | — |
| oracle | jre | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)
vendor_redhat·2013-04-16·CVSS 10.0
CVE-2013-2428 [CRITICAL] JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)
JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2427.
Red Hat
JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)
vendor_redhat·2013-04-16·CVSS 10.0
CVE-2013-2427 [CRITICAL] JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)
JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2428.
Red Hat
JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)
vendor_redhat·2013-04-16·CVSS 10.0
CVE-2013-2414 [CRITICAL] JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)
JDK: multiple unspecified JavaFX vulnerabilities fixed in 7u21 (JavaFX)
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2427, and CVE-2013-2428.
GHSA
GHSA-qwqw-pj6q-q5rj: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2013-2414 [CRITICAL] GHSA-qwqw-pj6q-q5rj: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2427, and CVE-2013-2428.
GHSA
GHSA-jw8r-h96r-55w9: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2013-2428 [CRITICAL] GHSA-jw8r-h96r-55w9: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2427.
GHSA
GHSA-4463-4cg8-898f: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2013-2427 [CRITICAL] GHSA-4463-4cg8-898f: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX, a different vulnerability than CVE-2013-0402, CVE-2013-2414, and CVE-2013-2428.
No detection rules found.
No public exploits indexed.
http://rhn.redhat.com/errata/RHSA-2013-0757.htmlhttp://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.htmlhttp://www.us-cert.gov/ncas/alerts/TA13-107Ahttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16416http://rhn.redhat.com/errata/RHSA-2013-0757.htmlhttp://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.htmlhttp://www.us-cert.gov/ncas/alerts/TA13-107Ahttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16416
2013-04-17
Published