CVE-2013-2407

MEDIUM 6.4CVE-2013-2407 · Published 18/06/2013 · updated 16/06/2026

In short

CVE-2013-2407 is a MEDIUM (CVSS 6.4) vulnerability affecting jdk (oracle), jre (oracle), jdk (sun).
Chance of exploitation in the next 30 days (EPSS): 5.2%, higher than 92.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk oracle	`= 1.6.0= 1.7.0≤ 1.6.0≤ 1.7.0`	No fix yet
jre oracle	`= 1.6.0= 1.7.0≤ 1.6.0≤ 1.7.0`	No fix yet
jdk sun	`= 1.6.0`	No fix yet
jre sun	`= 1.6.0`	No fix yet

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and availability via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "XML security and the class loader."

References

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free