CVE-2013-5852
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java...
7.6 High
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5832.
Exploit likelihood
3.73%Up 2.3 points since Feb 4, 2022
What each source reports
NVD Score used
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5832.
- Record
CVE-2013-5852- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5832.
- Record
CVE-2013-5852- Updated
- 2026-11-02
EUVDEUVD-2013-5687 No score
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5832.
- Record
EUVD-2013-5687- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cpxh-4vhc-97mc No score
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java...
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5832.
- Record
GHSA-cpxh-4vhc-97mc- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-oracleRed Hat:rhel_extras:5::server From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.1.el5_10 | 1:1.7.0.45-1jpp.1.el5_10 |
java-1.7.0-oracle-develRed Hat:rhel_extras:5::server From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.1.el5_10 | 1:1.7.0.45-1jpp.1.el5_10 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:5::server From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.1.el5_10 | 1:1.7.0.45-1jpp.1.el5_10 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:5::server From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.1.el5_10 | 1:1.7.0.45-1jpp.1.el5_10 |
java-1.7.0-oracle-pluginRed Hat:rhel_extras:5::server From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.1.el5_10 | 1:1.7.0.45-1jpp.1.el5_10 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:5::server From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.1.el5_10 | 1:1.7.0.45-1jpp.1.el5_10 |
java-1.7.0-oracleRed Hat:rhel_extras:6 From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.2.el6_4 | 1:1.7.0.45-1jpp.2.el6_4 |
java-1.7.0-oracle-develRed Hat:rhel_extras:6 From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.2.el6_4 | 1:1.7.0.45-1jpp.2.el6_4 |
java-1.7.0-oracle-javafxRed Hat:rhel_extras:6 From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.2.el6_4 | 1:1.7.0.45-1jpp.2.el6_4 |
java-1.7.0-oracle-jdbcRed Hat:rhel_extras:6 From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.2.el6_4 | 1:1.7.0.45-1jpp.2.el6_4 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
java-1.7.0-oracle-pluginRed Hat:rhel_extras:6 From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.2.el6_4 | 1:1.7.0.45-1jpp.2.el6_4 |
java-1.7.0-oracle-srcRed Hat:rhel_extras:6 From an advisory covering 49 CVEs |
before 1:1.7.0.45-1jpp.2.el6_4 | 1:1.7.0.45-1jpp.2.el6_4 |
java-1.6.0-sunRed Hat:rhel_extras_oracle_java:5 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.3.el5_10 | 1:1.6.0.75-1jpp.3.el5_10 |
java-1.6.0-sun-demoRed Hat:rhel_extras_oracle_java:5 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.3.el5_10 | 1:1.6.0.75-1jpp.3.el5_10 |
java-1.6.0-sun-develRed Hat:rhel_extras_oracle_java:5 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.3.el5_10 | 1:1.6.0.75-1jpp.3.el5_10 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.3.el5_10 | 1:1.6.0.75-1jpp.3.el5_10 |
java-1.6.0-sun-pluginRed Hat:rhel_extras_oracle_java:5 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.3.el5_10 | 1:1.6.0.75-1jpp.3.el5_10 |
java-1.6.0-sun-srcRed Hat:rhel_extras_oracle_java:5 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.3.el5_10 | 1:1.6.0.75-1jpp.3.el5_10 |
java-1.6.0-sunRed Hat:rhel_extras_oracle_java:6 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.1.el6_5 | 1:1.6.0.75-1jpp.1.el6_5 |
java-1.6.0-sun-demoRed Hat:rhel_extras_oracle_java:6 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.1.el6_5 | 1:1.6.0.75-1jpp.1.el6_5 |
java-1.6.0-sun-develRed Hat:rhel_extras_oracle_java:6 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.1.el6_5 | 1:1.6.0.75-1jpp.1.el6_5 |
java-1.6.0-sun-jdbcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.1.el6_5 | 1:1.6.0.75-1jpp.1.el6_5 |
java-1.6.0-sun-pluginRed Hat:rhel_extras_oracle_java:6 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.1.el6_5 | 1:1.6.0.75-1jpp.1.el6_5 |
java-1.6.0-sun-srcRed Hat:rhel_extras_oracle_java:6 From an advisory covering 127 CVEs |
before 1:1.6.0.75-1jpp.1.el6_5 | 1:1.6.0.75-1jpp.1.el6_5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-5852 is a high vulnerability (CVSS 7.6) in Oracle Jdk, published October 16, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.73%, the 89th percentile. No source names a fixed version.
References
access.redhat.com/errata/RHSA-2014:0414
osvdb.org/98543
rhn.redhat.com/errata/RHSA-2013-1440.html
marc.info?l=bugtraq&m=138674073720143&w=2
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18983
Show 194 moreShow less
oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
securityfocus.com/bid/63130
nvd.nist.gov/vuln/detail/CVE-2013-5852
github.com/advisories/GHSA-cpxh-4vhc-97mc
bugzilla.redhat.com/show_bug.cgi?id=1018713
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1440.json
cve.org/CVERecord?id=CVE-2013-3829
seclists.org/fulldisclosure/2013/Oct/116
security-explorations.com/materials/SE-2012-01-ORACLE-13.pdf
kb.cert.org/vuls/id/225657
cisa.gov/known-exploited-vulnerabilities-catalog
This page doesn't list everything
Left out here: 365 references. The JSON record has them.