← Back

CVE-2013-2415

nvd nist
Published: Apr 17, 2013Modified: Apr 29, 2026

JSON object

Loading...
2.1
Vector
AV:L/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 3.9 / Impact: 2.9
Source: NVD

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "processing of MTOM attachments" and the creation of temporary files with weak permissions.

Affected (28)

Products: Oracle: Jre, Jdk
Oracle
2 products
Jre
Jdk
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Jre
Up to 1.7.0
Jre
Version 1.7.0
Jre
Version 1.7.0 update10
Jre
Version 1.7.0 update11
Jre
Version 1.7.0 update13
Jre
Version 1.7.0 update15
Jre
Version 1.7.0 update1
Jre
Version 1.7.0 update2
Jre
Version 1.7.0 update3
Jre
Version 1.7.0 update4
Jre
Version 1.7.0 update5
Jre
Version 1.7.0 update6
Jre
Version 1.7.0 update7
Jre
Version 1.7.0 update9
Configuration B
14 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Jdk
Up to 1.7.0
Jdk
Version 1.7.0
Jdk
Version 1.7.0 update10
Jdk
Version 1.7.0 update11
Jdk
Version 1.7.0 update13
Jdk
Version 1.7.0 update15
Jdk
Version 1.7.0 update1
Jdk
Version 1.7.0 update2
Jdk
Version 1.7.0 update3
Jdk
Version 1.7.0 update4
Jdk
Version 1.7.0 update5
Jdk
Version 1.7.0 update6
Jdk
Version 1.7.0 update7
Jdk
Version 1.7.0 update9

References (40)

Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Vendor Advisory
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
US Government Resource
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: secalert_us@oracle.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.