CVE-2013-0431 — Oracle JRE Sandbox Bypass Vulnerability
CVE-2013-0431: Oracle JRE Sandbox Bypass Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Oracle |
| Product | Java Runtime Environment (JRE) |
| Date added | 2022-05-25 |
| Due date | 2022-06-15 |
| Ransomware campaign use | Known |
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2013-0431
Weakness behind it
CISA has not recorded a CWE for this entry, so the CVE → CWE → CAPEC → ATT&CK chain cannot be walked from here. That is a gap in the catalogue, not evidence the vulnerability has no weakness class — check the NVD record below.
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-0431
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
See all 1,745 pages under Vulnerabilities (CVE) →
Related pages
Browse by topic
Every page in the corpus, grouped. Search finds one page; this shows what else is here.