CVE-2013-2439
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
6.9 Medium
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.
Exploit likelihood
0.42%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.
- Record
CVE-2013-2439- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.
- Record
CVE-2013-2439- Updated
- 2026-11-02
EUVDEUVD-2013-2385 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.
- Record
EUVD-2013-2385- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v7j5-xfvg-jhj2 No score
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.
- Record
GHSA-v7j5-xfvg-jhj2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-oracleRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-develRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:5::server From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el5 | 1:1.7.0.21-1jpp.1.el5 |
java-1.7.0-oracleRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-develRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-oracle-pluginRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:6 From an advisory covering 42 CVEs |
before 1:1.7.0.21-1jpp.1.el6 | 1:1.7.0.21-1jpp.1.el6 |
java-1.6.0-sunRed Hat:rhel_extras:5::server From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sun-demoRed Hat:rhel_extras:5::server From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sun-develRed Hat:rhel_extras:5::server From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:5::server From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:5::server From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sun-srcRed Hat:rhel_extras:5::server From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el5_9 | 1:1.6.0.45-1jpp.1.el5_9 |
java-1.6.0-sunRed Hat:rhel_extras:6 From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-sun-demoRed Hat:rhel_extras:6 From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-sun-develRed Hat:rhel_extras:6 From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras:6 From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-sun-pluginRed Hat:rhel_extras:6 From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
java-1.6.0-sun-srcRed Hat:rhel_extras:6 From an advisory covering 25 CVEs |
before 1:1.6.0.45-1jpp.1.el6 | 1:1.6.0.45-1jpp.1.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2439 is a medium vulnerability (CVSS 6.9) in Oracle Javafx, published April 17, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. No source names a fixed version.
References
rhn.redhat.com/errata/RHSA-2013-0758.html
us-cert.gov/ncas/alerts/TA13-107A
marc.info?l=bugtraq&m=137283787217316&w=2
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19541
Show 173 moreShow less
securityfocus.com/bid/59178
oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
nvd.nist.gov/vuln/detail/CVE-2013-2439
github.com/advisories/GHSA-v7j5-xfvg-jhj2
access.redhat.com/errata/RHSA-2013:0757
bugzilla.redhat.com/show_bug.cgi?id=920245
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0757.json
cve.org/CVERecord?id=CVE-2013-0401
cisa.gov/known-exploited-vulnerabilities-catalog