CVE-2013-5851 : Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedde

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP.

Published 2013-10-16 18:55:04

Updated 2022-05-13 14:57:20

Source Oracle

View at NVD, CVE.org

Products affected by CVE-2013-5851

Oracle » JDK » Update Update40
Versions up to, including, (<=) 1.7.0
cpe:2.3:a:oracle:jdk:*:update40:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0
cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update1
cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update2
cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update5
cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update6
cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update3
cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update4
cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update10
cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update11
cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update7
cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update9
cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update17
cpe:2.3:a:oracle:jdk:1.7.0:update17:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update13
cpe:2.3:a:oracle:jdk:1.7.0:update13:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update15
cpe:2.3:a:oracle:jdk:1.7.0:update15:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update25
cpe:2.3:a:oracle:jdk:1.7.0:update25:*:*:*:*:*:*
Matching versions
Oracle » JDK » Version: 1.7.0 Update Update21
cpe:2.3:a:oracle:jdk:1.7.0:update21:*:*:*:*:*:*
Matching versions
Oracle » JRE » Update Update40
Versions up to, including, (<=) 1.7.0
cpe:2.3:a:oracle:jre:*:update40:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0
cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update1
cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update4
cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update5
cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update2
cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update3
cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update6
cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update7
cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update9
cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update10
cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update11
cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update17
cpe:2.3:a:oracle:jre:1.7.0:update17:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update15
cpe:2.3:a:oracle:jre:1.7.0:update15:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update13
cpe:2.3:a:oracle:jre:1.7.0:update13:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update25
cpe:2.3:a:oracle:jre:1.7.0:update25:*:*:*:*:*:*
Matching versions
Oracle » JRE » Version: 1.7.0 Update Update21
cpe:2.3:a:oracle:jre:1.7.0:update21:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2013-5851

Top countries where our scanners detected CVE-2013-5851

Top open port discovered on systems with this issue 80

IPs affected by CVE-2013-5851 70

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2013-5851!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2013-5851

EPSS FAQ

0.73%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 78 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2013-5851

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None

References for CVE-2013-5851

http://rhn.redhat.com/errata/RHSA-2013-1793.html

RHSA-2013:1793 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2013-1508.html

RHSA-2013:1508 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2013-1507.html

RHSA-2013:1507 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2013-1447.html

RHSA-2013:1447 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Oracle Critical Patch Update - October 2013
Vendor Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html

[security-announce] SUSE-SU-2013:1677-1: important: Security update for

CVEs referencing this url
http://rhn.redhat.com/errata/RHSA-2013-1440.html

RHSA-2013:1440 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html

openSUSE-SU-2013:1663-1: moderate: update for java-1_7_0-openjdk

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/87997

Oracle Java SE JAXP information disclosure CVE-2013-5851 Vulnerability Report
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html

[security-announce] SUSE-SU-2013:1666-1: important: Security update for

CVEs referencing this url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19061

Repository / Oval Repository
http://rhn.redhat.com/errata/RHSA-2013-1451.html

RHSA-2013:1451 - Security Advisory - Red Hat Customer Portal

CVEs referencing this url
http://www-01.ibm.com/support/docview.wss?uid=swg21655201

IBM Security Bulletin: Multiple vulnerabilities in current releases of the IBM® SDK, Java™ Technology Edition

CVEs referencing this url
http://www.ubuntu.com/usn/USN-2089-1

USN-2089-1: OpenJDK 7 vulnerabilities | Ubuntu security notices

CVEs referencing this url
http://www.ubuntu.com/usn/USN-2033-1

USN-2033-1: OpenJDK 6 vulnerabilities | Ubuntu security notices

CVEs referencing this url
http://www.securityfocus.com/bid/63142

Oracle Java SE CVE-2013-5851 Remote Security Vulnerability
http://security.gentoo.org/glsa/glsa-201406-32.xml

IcedTea JDK: Multiple vulnerabilities (GLSA 201406-32) — Gentoo security

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2013-5851

Products affected by CVE-2013-5851

Threat overview for CVE-2013-5851

Exploit prediction scoring system (EPSS) score for CVE-2013-5851

CVSS scores for CVE-2013-5851

References for CVE-2013-5851