CVE-2013-5802 Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40....

HighCVSS 7.5 EPSS 4.4%

Published: 2013-10-16 20:31
Updated: 2026-06-17 02:59
Exploit status: No public exploit known

Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXP.

Affected products

Product	Affected versions	Fixed in
oracle jdk	<= 1.5.0	No fix listed
oracle jdk	= 1.5.0-update36	No fix listed
oracle jdk	= 1.5.0-update38	No fix listed
oracle jdk	= 1.5.0-update40	No fix listed
oracle jdk	= 1.5.0-update41	No fix listed
oracle jdk	= 1.5.0-update45	No fix listed
oracle jdk	<= 1.6.0	No fix listed
oracle jdk	= 1.6.0-update22	No fix listed
oracle jdk	= 1.6.0-update23	No fix listed
oracle jdk	= 1.6.0-update24	No fix listed
oracle jdk	= 1.6.0-update25	No fix listed
oracle jdk	= 1.6.0-update26	No fix listed
oracle jdk	= 1.6.0-update27	No fix listed
oracle jdk	= 1.6.0-update29	No fix listed
oracle jdk	= 1.6.0-update30	No fix listed
oracle jdk	= 1.6.0-update31	No fix listed
oracle jdk	= 1.6.0-update32	No fix listed
oracle jdk	= 1.6.0-update33	No fix listed
oracle jdk	= 1.6.0-update34	No fix listed
oracle jdk	= 1.6.0-update35	No fix listed
oracle jdk	= 1.6.0-update37	No fix listed
oracle jdk	= 1.6.0-update38	No fix listed
oracle jdk	= 1.6.0-update39	No fix listed
oracle jdk	= 1.6.0-update41	No fix listed
oracle jdk	= 1.6.0-update43	No fix listed

Show 175 more

Product	Affected versions	Fixed in
oracle jdk	= 1.6.0-update45	No fix listed
oracle jdk	= 1.6.0-update51	No fix listed
oracle jdk	<= 1.7.0	No fix listed
oracle jdk	= 1.7.0	No fix listed
oracle jdk	= 1.7.0-update1	No fix listed
oracle jdk	= 1.7.0-update10	No fix listed
oracle jdk	= 1.7.0-update11	No fix listed
oracle jdk	= 1.7.0-update13	No fix listed
oracle jdk	= 1.7.0-update15	No fix listed
oracle jdk	= 1.7.0-update17	No fix listed
oracle jdk	= 1.7.0-update2	No fix listed
oracle jdk	= 1.7.0-update21	No fix listed
oracle jdk	= 1.7.0-update25	No fix listed
oracle jdk	= 1.7.0-update3	No fix listed
oracle jdk	= 1.7.0-update4	No fix listed
oracle jdk	= 1.7.0-update5	No fix listed
oracle jdk	= 1.7.0-update6	No fix listed
oracle jdk	= 1.7.0-update7	No fix listed
oracle jdk	= 1.7.0-update9	No fix listed
sun jdk	= 1.5.0	No fix listed
sun jdk	= 1.5.0-update1	No fix listed
sun jdk	= 1.5.0-update10	No fix listed
sun jdk	= 1.5.0-update11	No fix listed
sun jdk	= 1.5.0-update11_b03	No fix listed
sun jdk	= 1.5.0-update12	No fix listed
sun jdk	= 1.5.0-update13	No fix listed
sun jdk	= 1.5.0-update14	No fix listed
sun jdk	= 1.5.0-update15	No fix listed
sun jdk	= 1.5.0-update16	No fix listed
sun jdk	= 1.5.0-update17	No fix listed
sun jdk	= 1.5.0-update18	No fix listed
sun jdk	= 1.5.0-update19	No fix listed
sun jdk	= 1.5.0-update2	No fix listed
sun jdk	= 1.5.0-update20	No fix listed
sun jdk	= 1.5.0-update21	No fix listed
sun jdk	= 1.5.0-update22	No fix listed
sun jdk	= 1.5.0-update23	No fix listed
sun jdk	= 1.5.0-update24	No fix listed
sun jdk	= 1.5.0-update25	No fix listed
sun jdk	= 1.5.0-update26	No fix listed
sun jdk	= 1.5.0-update27	No fix listed
sun jdk	= 1.5.0-update28	No fix listed
sun jdk	= 1.5.0-update29	No fix listed
sun jdk	= 1.5.0-update3	No fix listed
sun jdk	= 1.5.0-update31	No fix listed
sun jdk	= 1.5.0-update33	No fix listed
sun jdk	= 1.5.0-update4	No fix listed
sun jdk	= 1.5.0-update5	No fix listed
sun jdk	= 1.5.0-update6	No fix listed
sun jdk	= 1.5.0-update7	No fix listed
sun jdk	= 1.5.0-update7_b03	No fix listed
sun jdk	= 1.5.0-update8	No fix listed
sun jdk	= 1.5.0-update9	No fix listed
sun jdk	= 1.6.0	No fix listed
sun jdk	= 1.6.0-update_10	No fix listed
sun jdk	= 1.6.0-update_11	No fix listed
sun jdk	= 1.6.0-update_12	No fix listed
sun jdk	= 1.6.0-update_13	No fix listed
sun jdk	= 1.6.0-update_14	No fix listed
sun jdk	= 1.6.0-update_15	No fix listed
sun jdk	= 1.6.0-update_16	No fix listed
sun jdk	= 1.6.0-update_17	No fix listed
sun jdk	= 1.6.0-update_18	No fix listed
sun jdk	= 1.6.0-update_19	No fix listed
sun jdk	= 1.6.0-update_20	No fix listed
sun jdk	= 1.6.0-update_21	No fix listed
sun jdk	= 1.6.0-update_3	No fix listed
sun jdk	= 1.6.0-update_4	No fix listed
sun jdk	= 1.6.0-update_5	No fix listed
sun jdk	= 1.6.0-update_6	No fix listed
sun jdk	= 1.6.0-update_7	No fix listed
sun jdk	= 1.6.0-update1	No fix listed
sun jdk	= 1.6.0-update1_b06	No fix listed
sun jdk	= 1.6.0-update2	No fix listed
oracle jre	<= 1.5.0	No fix listed
oracle jre	= 1.5.0-update36	No fix listed
oracle jre	= 1.5.0-update38	No fix listed
oracle jre	= 1.5.0-update40	No fix listed
oracle jre	= 1.5.0-update41	No fix listed
oracle jre	= 1.5.0-update45	No fix listed
oracle jre	<= 1.7.0	No fix listed
oracle jre	= 1.7.0	No fix listed
oracle jre	= 1.7.0-update1	No fix listed
oracle jre	= 1.7.0-update10	No fix listed
oracle jre	= 1.7.0-update11	No fix listed
oracle jre	= 1.7.0-update13	No fix listed
oracle jre	= 1.7.0-update15	No fix listed
oracle jre	= 1.7.0-update17	No fix listed
oracle jre	= 1.7.0-update2	No fix listed
oracle jre	= 1.7.0-update21	No fix listed
oracle jre	= 1.7.0-update25	No fix listed
oracle jre	= 1.7.0-update3	No fix listed
oracle jre	= 1.7.0-update4	No fix listed
oracle jre	= 1.7.0-update5	No fix listed
oracle jre	= 1.7.0-update6	No fix listed
oracle jre	= 1.7.0-update7	No fix listed
oracle jre	= 1.7.0-update9	No fix listed
oracle jre	<= 1.6.0	No fix listed
oracle jre	= 1.6.0-update22	No fix listed
oracle jre	= 1.6.0-update23	No fix listed
oracle jre	= 1.6.0-update24	No fix listed
oracle jre	= 1.6.0-update25	No fix listed
oracle jre	= 1.6.0-update26	No fix listed
oracle jre	= 1.6.0-update27	No fix listed
oracle jre	= 1.6.0-update29	No fix listed
oracle jre	= 1.6.0-update30	No fix listed
oracle jre	= 1.6.0-update31	No fix listed
oracle jre	= 1.6.0-update32	No fix listed
oracle jre	= 1.6.0-update33	No fix listed
oracle jre	= 1.6.0-update34	No fix listed
oracle jre	= 1.6.0-update35	No fix listed
oracle jre	= 1.6.0-update37	No fix listed
oracle jre	= 1.6.0-update38	No fix listed
oracle jre	= 1.6.0-update39	No fix listed
oracle jre	= 1.6.0-update41	No fix listed
oracle jre	= 1.6.0-update43	No fix listed
oracle jre	= 1.6.0-update45	No fix listed
oracle jre	= 1.6.0-update51	No fix listed
sun jre	= 1.5.0	No fix listed
sun jre	= 1.5.0-update1	No fix listed
sun jre	= 1.5.0-update10	No fix listed
sun jre	= 1.5.0-update11	No fix listed
sun jre	= 1.5.0-update12	No fix listed
sun jre	= 1.5.0-update13	No fix listed
sun jre	= 1.5.0-update14	No fix listed
sun jre	= 1.5.0-update15	No fix listed
sun jre	= 1.5.0-update16	No fix listed
sun jre	= 1.5.0-update17	No fix listed
sun jre	= 1.5.0-update18	No fix listed
sun jre	= 1.5.0-update19	No fix listed
sun jre	= 1.5.0-update2	No fix listed
sun jre	= 1.5.0-update20	No fix listed
sun jre	= 1.5.0-update21	No fix listed
sun jre	= 1.5.0-update22	No fix listed
sun jre	= 1.5.0-update23	No fix listed
sun jre	= 1.5.0-update24	No fix listed
sun jre	= 1.5.0-update25	No fix listed
sun jre	= 1.5.0-update26	No fix listed
sun jre	= 1.5.0-update27	No fix listed
sun jre	= 1.5.0-update28	No fix listed
sun jre	= 1.5.0-update29	No fix listed
sun jre	= 1.5.0-update3	No fix listed
sun jre	= 1.5.0-update31	No fix listed
sun jre	= 1.5.0-update33	No fix listed
sun jre	= 1.5.0-update4	No fix listed
sun jre	= 1.5.0-update5	No fix listed
sun jre	= 1.5.0-update6	No fix listed
sun jre	= 1.5.0-update7	No fix listed
sun jre	= 1.5.0-update8	No fix listed
sun jre	= 1.5.0-update9	No fix listed
sun jre	= 1.6.0	No fix listed
sun jre	= 1.6.0-update_1	No fix listed
sun jre	= 1.6.0-update_10	No fix listed
sun jre	= 1.6.0-update_11	No fix listed
sun jre	= 1.6.0-update_12	No fix listed
sun jre	= 1.6.0-update_13	No fix listed
sun jre	= 1.6.0-update_14	No fix listed
sun jre	= 1.6.0-update_15	No fix listed
sun jre	= 1.6.0-update_16	No fix listed
sun jre	= 1.6.0-update_17	No fix listed
sun jre	= 1.6.0-update_18	No fix listed
sun jre	= 1.6.0-update_19	No fix listed
sun jre	= 1.6.0-update_2	No fix listed
sun jre	= 1.6.0-update_20	No fix listed
sun jre	= 1.6.0-update_21	No fix listed
sun jre	= 1.6.0-update_3	No fix listed
sun jre	= 1.6.0-update_4	No fix listed
sun jre	= 1.6.0-update_5	No fix listed
sun jre	= 1.6.0-update_6	No fix listed
sun jre	= 1.6.0-update_7	No fix listed
sun jre	= 1.6.0-update_9	No fix listed
oracle jrockit	<= r27.7.6	No fix listed
oracle jrockit	= r27.7.1	No fix listed
oracle jrockit	= r27.7.2	No fix listed
oracle jrockit	= r27.7.3	No fix listed

References

bugzilla.redhat.com
APPLE-SA-2013-10-15-1 vendor-advisory
SUSE-SU-2013:1666 vendor-advisory
SUSE-SU-2013:1677 vendor-advisory
openSUSE-SU-2013:1663 vendor-advisory
HPSBUX02943 vendor-advisory
HPSBUX02944 vendor-advisory
RHSA-2013:1440 vendor-advisory
RHSA-2013:1447 vendor-advisory
RHSA-2013:1451 vendor-advisory
RHSA-2013:1505 vendor-advisory
RHSA-2013:1507 vendor-advisory
RHSA-2013:1508 vendor-advisory
RHSA-2013:1509 vendor-advisory
RHSA-2013:1793 vendor-advisory
56338 third-party-advisory
GLSA-201406-32 vendor-advisory
support.apple.com
www-01.ibm.com
www.hitachi.co.jp
www.oracle.com vendor-advisory
63135 vdb-entry
USN-2033-1 vendor-advisory
USN-2089-1 vendor-advisory
RHSA-2014:0414 vendor-advisory
oval:org.mitre.oval:def:19207 signature vdb-entry

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 4.43% (percentile 91.5)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.