{"id":"CVE-2013-2423","aliases":["EUVD-2013-2369","GHSA-wq4h-35pf-mp23","RHSA-2013:0751","RHSA-2013:0752","RHSA-2013:0757","RHSA-2013:0822","openSUSE-SU-2024:10534-1"],"status":"published","title":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.85215,"percentile":0.99717,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-284"],"published":"2013-04-17T15:00:00Z","modified":"2026-06-29T10:05:29Z","kev":{"date_added":"2022-05-25","due_date":"2022-06-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-05-25"},{"source":"kev","since":"2022-05-25"}],"exploits":[{"source":"metasploit","id":"exploit/multi/browser/java_jre17_reflection_types","title":"Java Applet Reflection Type Confusion Remote Code Execution","type":"exploit","platform":"Java,Linux,OSX,Windows","date":"2013-01-10","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/browser/java_jre17_reflection_types"},{"source":"exploitdb","id":"EDB-24976","title":"Java Applet - Reflection Type Confusion Remote Code Execution (Metasploit)","type":"remote","platform":"multiple","date":"2013-04-23","verified":true,"url":"https://www.exploit-db.com/exploits/24976"}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el6_4"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el5_9"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el5_9"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el5_9"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el5_9"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el5_9"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"java-1.7.0-openjdk-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.19-2.3.9.1.el5_9"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el5"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el5"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el5"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el5"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el5"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el5"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-oracle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el6"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-oracle-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el6"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-oracle-javafx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el6"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-oracle-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el6"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-oracle-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el6"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-oracle-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.21-1jpp.1.el6"}]}],"bundled":42},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el5_9"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el5_9"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el5_9"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el5_9"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el5_9"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:5::server","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el5_9"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-ibm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el6_4"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-ibm-demo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el6_4"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-ibm-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el6_4"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-ibm-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el6_4"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-ibm-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el6_4"}]}],"bundled":32},{"source":"osv","ecosystem":"Red Hat:rhel_extras:6","package":"java-1.7.0-ibm-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.7.0.4.2-1jpp.1.el6_4"}]}],"bundled":32},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"java-1_7_0-openjdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0.121-1.1"}]}],"bundled":304}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"java runtime environment (jre)"},{"vendor":"oracle","product":"jre"}],"references":[{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"http://weblog.ikvm.net/PermaLink.aspx?guid=acd2dd6d-1028-4996-95df-efa42ac237f0","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA13-107A","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0757.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b453d9be6b3f","tags":["x_refsource_MISC","x_transferred","Patch"]},{"url":"http://www.exploit-db.com/exploits/24976","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:161","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0752.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1806-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://blog.spiderlabs.com/2013/04/java-is-so-confusing.html","tags":["x_refsource_MISC","x_transferred","Not Applicable"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952398","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16700","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","article"]},{"url":"http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2423","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2423","tags":["advisory"]},{"url":"http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released"},{"url":"https://github.com/advisories/GHSA-wq4h-35pf-mp23"},{"url":"https://access.redhat.com/errata/RHSA-2013:0751","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"http://icedtea.classpath.org/hg/release/icedtea7-2.3/file/icedtea-2.3.9/NEWS","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=920245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=920247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952389","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952550","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952646","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952653","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952711","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0751.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0401","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0401","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0401","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1488","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1488","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1488","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1518","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1518","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1537","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1537","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1537","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1557","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1557","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1557","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1558","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1558","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1558","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1569","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1569","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1569","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2383","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2383","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2384","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2384","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2384","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2415","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2415","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2415","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2417","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2417","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2417","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2419","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2420","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2420","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2420","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2421","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2421","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2421","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2422","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2422","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2422","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2423","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2423","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2424","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2424","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2424","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2426","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2426","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2426","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2429","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2429","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2429","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2430","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2430","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2430","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2431","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2431","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2431","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2436","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0752","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0752.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0757","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=920246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=920248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953135","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=953275","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0757.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0402","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0402","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0402","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1491","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1491","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1491","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1540","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1540","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1540","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1561","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1561","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1563","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1563","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1563","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1564","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1564","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1564","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2394","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2394","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2394","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2414","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2414","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2416","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2416","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2416","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2418","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2418","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2418","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2425","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2425","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2425","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2427","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2428","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2432","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2432","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2433","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2433","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2433","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2434","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2434","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2435","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2435","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2438","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2438","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2439","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2439","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-2440","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-2440","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2440","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0822","tags":["advisory"]},{"url":"https://www.ibm.com/developerworks/java/jdk/alerts/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=907589","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0822.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-0169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-0169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0169","tags":["advisory"]},{"url":"http://www.isg.rhul.ac.uk/tls/","tags":["article"]},{"url":"http://www.openssl.org/news/secadv_20130205.txt","tags":["article"]},{"url":"https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released","tags":["article"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-5035","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0497","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1682","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1716","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1718","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1723","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1724","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1725","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1726","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4681","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5079","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5084","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5085","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5086","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5087","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5088","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1557","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2473","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5849","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5850","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5896","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-1876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2490","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4216","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6457","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6519","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6531","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2621","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2632","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4733","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4844","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0636","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0687","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0695","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3458","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3485","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5597","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2013-2423","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.","status":"published","published":"2013-04-17T15:00:00Z","modified":"2025-10-22T00:05:43.126Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"adp"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:34:55.825574Z"}],"euvd":[{"id":"EUVD-2013-2369","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.","status":"published","published":"2013-04-17T15:00:00Z","modified":"2025-10-22T00:05:43Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"exploited_since":"2022-05-25","updated_at":"2026-11-02T19:49:39.244432Z"}],"ghsa":[{"id":"GHSA-wq4h-35pf-mp23","title":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.","status":"published","published":"2022-05-17T00:55:30Z","modified":"2025-10-22T03:31:06Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:04:09.843024Z"}],"kev":[{"id":"CVE-2013-2423","title":"Oracle JRE Unspecified Vulnerability","description":"Unspecified vulnerability in hotspot for Java Runtime Environment (JRE) allows remote attackers to affect integrity.","kev":{"date_added":"2022-05-25","due_date":"2022-06-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2013-2423","description":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.","status":"published","published":"2013-04-17T18:55:07.087Z","modified":"2026-06-16T23:53:20.027Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:02:25.704053Z"}],"osv":[{"id":"openSUSE-SU-2024:10534-1","title":"java-1_7_0-openjdk-1.7.0.121-1.1 on GA media","description":"These are all security issues fixed in the java-1_7_0-openjdk-1.7.0.121-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:18:17.019339Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"RHSA-2013:0751","title":"Red Hat Security Advisory: java-1.7.0-openjdk security update","status":"published","published":"2024-09-15T20:47:13Z","modified":"2026-06-29T10:05:24Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:0752","title":"Red Hat Security Advisory: java-1.7.0-openjdk security update","status":"published","published":"2024-09-15T20:47:19Z","modified":"2026-06-29T10:05:25Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:0757","title":"Red Hat Security Advisory: java-1.7.0-oracle security update","status":"published","published":"2024-09-15T20:47:23Z","modified":"2026-06-29T10:05:26Z","updated_at":"2026-11-02T15:53:01.993625Z"},{"id":"RHSA-2013:0822","title":"Red Hat Security Advisory: java-1.7.0-ibm security update","status":"published","published":"2024-09-15T20:47:34Z","modified":"2026-06-29T10:05:29Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}