CVE-2013-5458 Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.

HighCVSS 9.3 EPSS 5.4%

Published: 2013-11-24 20:00
Updated: 2026-06-17 02:58
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

Product	Affected versions	Fixed in
ibm java	= 7.0.0.0	No fix listed

References

SUSE-SU-2013:1677 vendor-advisory
RHSA-2013:1507 vendor-advisory
56338 third-party-advisory
IV51328 vendor-advisory
www-01.ibm.com vendor-advisory
www-01.ibm.com vendor-advisory
ibm-java-cve20135458-code-exec(88257) vdb-entry
www.ibm.com vendor-advisory

CVSS v2.0

9.3 High

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 5.39% (percentile 92.8)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.