CVE-2013-5895

MEDIUM 5.0CVE-2013-5895 · Published 15/01/2014 · updated 16/06/2026

In short

CVE-2013-5895 is a MEDIUM (CVSS 5.0) vulnerability affecting jdk (hp), jre (hp), javafx (oracle).
Chance of exploitation in the next 30 days (EPSS): 5.7%, higher than 93.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
jdk hp	`≤ 7.0.08`	No fix yet
jre hp	`≤ 7.0.08`	No fix yet
javafx oracle	`= 2.2.45`	No fix yet
jre oracle	`= 1.7.0`	No fix yet

Description

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.

References

marc.info · Third Party Advisory
osvdb.org/102022 · Broken Link
rhn.redhat.com/errata/RHSA-2014-0030.html · Third Party Advisory
secunia.com/advisories/56484 · Permissions Required
secunia.com/advisories/56485 · Permissions Required
secunia.com/advisories/56535 · Permissions Required
oracle.com/technetwork/topics/security/cpujan2014-1972949.html · Vendor Advisory
securityfocus.com/bid/64758 · Third Party Advisory
securityfocus.com/bid/64906 · Third Party Advisory
securitytracker.com/id/1029608 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/90353
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay · Third Party Advisory

More vulnerabilities in jdk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

jdk

≤ 7.0.08

No fix yet

jre

≤ 7.0.08

No fix yet

javafx

oracle

= 2.2.45

No fix yet

jre

oracle

= 1.7.0

No fix yet

More vulnerabilities in jdk

See all →