CVE-2013-0431 — Oracle JRE Sandbox Bypass Vulnerability
CVE-2013-0431: Oracle JRE Sandbox Bypass Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Oracle |
| Product | Java Runtime Environment (JRE) |
| Date added | 2022-05-25 |
| Due date | 2022-06-15 |
| Ransomware campaign use | Known |
Description
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle allows remote attackers to bypass the Java security sandbox.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2013-0431
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-0431
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog