Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier…
Priority LOW 29Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.
Why it matters now
EPSS 0.03195 88th percentileScored 2026-11-07
Fix Fixed Red Hat: 5 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 45
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:oracle:jdk:*:update40:*:*:*:*:*:* | up to 1.7.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:* | 1.7.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:* | 1.7.0 update1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:* | 1.7.0 update10 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:* | 1.7.0 update11 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update13:*:*:*:*:*:* | 1.7.0 update13 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update15:*:*:*:*:*:* | 1.7.0 update15 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update17:*:*:*:*:*:* | 1.7.0 update17 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:* | 1.7.0 update2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update21:*:*:*:*:*:* | 1.7.0 update21 | Vulnerable | Oracle |
- cpe:2.3:a:oracle:jdk:*:update40:*:*:*:*:*:* Versions up to 1.7.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update1:*:*:*:*:*:* Versions 1.7.0 update1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update10:*:*:*:*:*:* Versions 1.7.0 update10 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update11:*:*:*:*:*:* Versions 1.7.0 update11 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update13:*:*:*:*:*:* Versions 1.7.0 update13 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update15:*:*:*:*:*:* Versions 1.7.0 update15 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update17:*:*:*:*:*:* Versions 1.7.0 update17 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update2:*:*:*:*:*:* Versions 1.7.0 update2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update21:*:*:*:*:*:* Versions 1.7.0 update21 Vulnerable ·Oracle
Show 35 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:oracle:jdk:1.7.0:update25:*:*:*:*:*:* | 1.7.0 update25 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:* | 1.7.0 update3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:* | 1.7.0 update4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:* | 1.7.0 update5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:* | 1.7.0 update6 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:* | 1.7.0 update7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:* | 1.7.0 update9 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:*:update40:*:*:*:*:*:* | up to 1.7.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:* | 1.7.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:* | 1.7.0 update1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:* | 1.7.0 update10 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:* | 1.7.0 update11 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update13:*:*:*:*:*:* | 1.7.0 update13 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update15:*:*:*:*:*:* | 1.7.0 update15 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update17:*:*:*:*:*:* | 1.7.0 update17 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:* | 1.7.0 update2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update21:*:*:*:*:*:* | 1.7.0 update21 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update25:*:*:*:*:*:* | 1.7.0 update25 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:* | 1.7.0 update3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:* | 1.7.0 update4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:* | 1.7.0 update5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:* | 1.7.0 update6 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:* | 1.7.0 update7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:* | 1.7.0 update9 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:*:*:*:*:*:*:*:* | up to 2.2.40 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:2.0.2:*:*:*:*:*:*:* | 2.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:2.0.3:*:*:*:*:*:*:* | 2.0.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:2.2.3:*:*:*:*:*:*:* | 2.2.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:2.2.4:*:*:*:*:*:*:* | 2.2.4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:2.2.5:*:*:*:*:*:*:* | 2.2.5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:2.2.7:*:*:*:*:*:*:* | 2.2.7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:javafx:2.2.21:*:*:*:*:*:*:* | 2.2.21 | Vulnerable | Oracle |
- cpe:2.3:a:oracle:jdk:1.7.0:update25:*:*:*:*:*:* Versions 1.7.0 update25 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update3:*:*:*:*:*:* Versions 1.7.0 update3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update4:*:*:*:*:*:* Versions 1.7.0 update4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update5:*:*:*:*:*:* Versions 1.7.0 update5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update6:*:*:*:*:*:* Versions 1.7.0 update6 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update7:*:*:*:*:*:* Versions 1.7.0 update7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jdk:1.7.0:update9:*:*:*:*:*:* Versions 1.7.0 update9 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:*:update40:*:*:*:*:*:* Versions up to 1.7.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:* Versions 1.7.0 update1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:* Versions 1.7.0 update10 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:* Versions 1.7.0 update11 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update13:*:*:*:*:*:* Versions 1.7.0 update13 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update15:*:*:*:*:*:* Versions 1.7.0 update15 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update17:*:*:*:*:*:* Versions 1.7.0 update17 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:* Versions 1.7.0 update2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update21:*:*:*:*:*:* Versions 1.7.0 update21 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update25:*:*:*:*:*:* Versions 1.7.0 update25 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:* Versions 1.7.0 update3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:* Versions 1.7.0 update4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:* Versions 1.7.0 update5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:* Versions 1.7.0 update6 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:* Versions 1.7.0 update7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:* Versions 1.7.0 update9 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:*:*:*:*:*:*:*:* Versions up to 2.2.40 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:2.2.7:*:*:*:*:*:*:* Versions 2.2.7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:javafx:2.2.21:*:*:*:*:*:*:* Versions 2.2.21 Vulnerable ·Oracle
Remediation
Red Hat 5 advisories
- RHSA-2014:0414 Released 2014-04-17 · Red Hat rating Importantjava-1.6.0-sun security update
- Oracle Java for Red Hat Enterprise Linux Desktop 5 java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10, java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10.i586, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.3.el5_10 +9
- Oracle Java for Red Hat Enterprise Linux Desktop 6 java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-devel-1:1.6.0.75-1jpp.1.el6_5 +3
- Oracle Java for Red Hat Enterprise Linux HPC Node 6 java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-devel-1:1.6.0.75-1jpp.1.el6_5 +1
- Oracle Java for Red Hat Enterprise Linux Server 5 java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10, java-1.6.0-sun-1:1.6.0.75-1jpp.3.el5_10.i586, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.3.el5_10 +9
- Oracle Java for Red Hat Enterprise Linux Server 6 java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-devel-1:1.6.0.75-1jpp.1.el6_5 +3
- Oracle Java for Red Hat Enterprise Linux Workstation 6 java-1.6.0-sun-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-demo-1:1.6.0.75-1jpp.1.el6_5, java-1.6.0-sun-devel-1:1.6.0.75-1jpp.1.el6_5 +3
- RHSA-2013:1793 Released 2013-12-05 · Red Hat rating LowRed Hat Network Satellite server IBM Java Runtime security update
- Red Hat Satellite 5.4 (RHEL v.5) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5, java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5.i386, java-1.6.0-ibm-devel-1:1.6.0.15.0-1jpp.1.el5 +1
- Red Hat Satellite 5.4 (RHEL v.6) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6, java-1.6.0-ibm-devel-1:1.6.0.15.0-1jpp.1.el6
- Red Hat Satellite 5.5 (RHEL v.5) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5, java-1.6.0-ibm-devel-1:1.6.0.15.0-1jpp.1.el5
- Red Hat Satellite 5.5 (RHEL v.6) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6, java-1.6.0-ibm-devel-1:1.6.0.15.0-1jpp.1.el6
- Red Hat Satellite 5.6 (RHEL v.5) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5, java-1.6.0-ibm-devel-1:1.6.0.15.0-1jpp.1.el5
- Red Hat Satellite 5.6 (RHEL v.6) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6, java-1.6.0-ibm-devel-1:1.6.0.15.0-1jpp.1.el6
- RHSA-2013:1507 Released 2013-11-07 · Red Hat rating Criticaljava-1.7.0-ibm security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10, java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10.i386, java-1.7.0-ibm-demo-1:1.7.0.6.0-1jpp.1.el5_10 +9
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4, java-1.7.0-ibm-demo-1:1.7.0.6.0-1jpp.1.el6_4, java-1.7.0-ibm-devel-1:1.7.0.6.0-1jpp.1.el6_4 +3
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4, java-1.7.0-ibm-demo-1:1.7.0.6.0-1jpp.1.el6_4, java-1.7.0-ibm-devel-1:1.7.0.6.0-1jpp.1.el6_4 +1
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10, java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10.i386, java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el5_10.ppc +15
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4, java-1.7.0-ibm-demo-1:1.7.0.6.0-1jpp.1.el6_4, java-1.7.0-ibm-devel-1:1.7.0.6.0-1jpp.1.el6_4 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.0-ibm-1:1.7.0.6.0-1jpp.1.el6_4, java-1.7.0-ibm-demo-1:1.7.0.6.0-1jpp.1.el6_4, java-1.7.0-ibm-devel-1:1.7.0.6.0-1jpp.1.el6_4 +3
Show 2 more Red Hat advisories
- RHSA-2013:1508 Released 2013-11-07 · Red Hat rating Criticaljava-1.6.0-ibm security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10, java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10.i386, java-1.6.0-ibm-accessibility-1:1.6.0.15.0-1jpp.1.el5_10 +13
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4, java-1.6.0-ibm-demo-1:1.6.0.15.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.15.0-1jpp.1.el6_4 +4
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4, java-1.6.0-ibm-demo-1:1.6.0.15.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.15.0-1jpp.1.el6_4 +2
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10, java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10.i386, java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el5_10.ppc +21
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4, java-1.6.0-ibm-demo-1:1.6.0.15.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.15.0-1jpp.1.el6_4 +5
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.6.0-ibm-1:1.6.0.15.0-1jpp.1.el6_4, java-1.6.0-ibm-demo-1:1.6.0.15.0-1jpp.1.el6_4, java-1.6.0-ibm-devel-1:1.6.0.15.0-1jpp.1.el6_4 +4
- RHSA-2013:1440 Released 2013-10-17 · Red Hat rating Criticaljava-1.7.0-oracle security update
- Red Hat Enterprise Linux Desktop Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-devel-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-javafx-1:1.7.0.45-1jpp.2.el6_4 +3
- Red Hat Enterprise Linux HPC Node Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-devel-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-javafx-1:1.7.0.45-1jpp.2.el6_4 +1
- Red Hat Enterprise Linux Server Supplementary (v. 5) java-1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10, java-1.7.0-oracle-1:1.7.0.45-1jpp.1.el5_10.i386, java-1.7.0-oracle-devel-1:1.7.0.45-1jpp.1.el5_10 +9
- Red Hat Enterprise Linux Server Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-devel-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-javafx-1:1.7.0.45-1jpp.2.el6_4 +3
- Red Hat Enterprise Linux Workstation Supplementary (v. 6) java-1.7.0-oracle-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-devel-1:1.7.0.45-1jpp.2.el6_4, java-1.7.0-oracle-javafx-1:1.7.0.45-1jpp.2.el6_4 +3
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Oracle Java for Red Hat Enterprise Linux Desktop 5 | Fixed | RHSA-2014:0414 |
| Oracle Java for Red Hat Enterprise Linux Desktop 6 | Fixed | RHSA-2014:0414 |
| Oracle Java for Red Hat Enterprise Linux HPC Node 6 | Fixed | RHSA-2014:0414 |
| Oracle Java for Red Hat Enterprise Linux Server 5 | Fixed | RHSA-2014:0414 |
| Oracle Java for Red Hat Enterprise Linux Server 6 | Fixed | RHSA-2014:0414 |
| Oracle Java for Red Hat Enterprise Linux Workstation 6 | Fixed | RHSA-2014:0414 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 5) | Fixed | RHSA-2013:1507, RHSA-2013:1508 |
| Red Hat Enterprise Linux Desktop Supplementary (v. 6) | Fixed | RHSA-2013:1440, RHSA-2013:1507, RHSA-2013:1508 |
| Red Hat Enterprise Linux HPC Node Supplementary (v. 6) | Fixed | RHSA-2013:1440, RHSA-2013:1507, RHSA-2013:1508 |
| Red Hat Enterprise Linux Server Supplementary (v. 5) | Fixed | RHSA-2013:1440, RHSA-2013:1507, RHSA-2013:1508 |
| Red Hat Enterprise Linux Server Supplementary (v. 6) | Fixed | RHSA-2013:1440, RHSA-2013:1507, RHSA-2013:1508 |
| Red Hat Enterprise Linux Workstation Supplementary (v. 6) | Fixed | RHSA-2013:1440, RHSA-2013:1507, RHSA-2013:1508 |
| Red Hat Satellite 5.4 (RHEL v.5) | Fixed | RHSA-2013:1793 |
| Red Hat Satellite 5.4 (RHEL v.6) | Fixed | RHSA-2013:1793 |
| Red Hat Satellite 5.5 (RHEL v.5) | Fixed | RHSA-2013:1793 |
| Red Hat Satellite 5.5 (RHEL v.6) | Fixed | RHSA-2013:1793 |
| Red Hat Satellite 5.6 (RHEL v.5) | Fixed | RHSA-2013:1793 |
| Red Hat Satellite 5.6 (RHEL v.6) | Fixed | RHSA-2013:1793 |
Not affected: 2 products
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
Timeline
- 2026-10-02 Threatist record created from CVE-2013-5848
- 2026-10-03 Alias added: GHSA-7vj6-73x7-37g5
References
Advisory 10
More Oracle Javafx vulnerabilities
- TI-2012-00448 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… CVSS 2.0HIGH 10.0
- TI-2015-02326 Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JavaFX 2.2.80; and Java… CVSS 2.0HIGH 10.0
- TI-2013-01378 Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and… CVSS 2.0MEDIUM 4.3
- TI-2013-00330 Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java… CVSS 2.0HIGH 10.0
- TI-2012-03679 Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and… CVSS 2.0HIGH 10.0
- TI-2013-02179 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java… CVSS 2.0HIGH 10.0
Sources
- CVE-2013-5848 · CVE Program
- CVE-2013-5848 · NVD
- FIRST EPSS
- GHSA-7vj6-73x7-37g5 · GitHub Advisory Database · CC BY 4.0
- CVE-2013-5848 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences