« Volver al listado

CVE-2013-2465

Estado: AnalizadaCrítica (9.8)⚠ Explotación activa

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CISA KEV — explotada activamente

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vector AV:N/AC:L/PR:N/UI:N indica explotación remota sin privilegios (T1190). La vulnerabilidad en el sandbox de Java permite ejecución de código arbitrario, acceso a datos y manipulación del sistema, confirmado por uso activo en ransomware.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account ManagementVulnerability ScanningNetwork SegmentationLimit Access to Resource Over NetworkFilter Network TrafficExecution Prevention

Tecnologías afectadas (6)

Oracle — JRESUN — JRESuse — Linux Enterprise DesktopSuse — Linux Enterprise JavaSuse — Linux Enterprise ServerSuse — Linux Enterprise Software Development KIT

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-2465",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2013-2465",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-10T19:00:39.857228Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "secalert_us@oracle.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-06-18T22:55:02.807",
  "references": [
    {
      "url": "http://advisories.mageia.org/MGASA-2013-0185.html",
      "tags": [
        "Broken Link"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880",
      "tags": [
        "Broken Link"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040",
      "tags": [
        "Patch"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=137545505800971&w=2",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=137545592101387&w=2",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://secunia.com/advisories/54154",
      "tags": [
        "Not Applicable"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183",
      "tags": [
        "Not Applicable"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/60657",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2014:0414",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975118",
      "tags": [
        "Issue Tracking"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106",
      "tags": [
        "Broken Link"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074",
      "tags": [
        "Broken Link"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455",
      "tags": [
        "Broken Link"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703",
      "tags": [
        "Broken Link"
      ],
      "source": "secalert_us@oracle.com"
    },
    {
      "url": "http://advisories.mageia.org/MGASA-2013-0185.html",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03898880",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/2a9c79db0040",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00026.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00027.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00028.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00029.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-07/msg00031.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00000.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00003.html",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=137545505800971&w=2",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=137545592101387&w=2",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-0963.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1059.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1060.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1081.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1455.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2013-1456.html",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/54154",
      "tags": [
        "Not Applicable"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://security.gentoo.org/glsa/glsa-201406-32.xml",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21642336",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:183",
      "tags": [
        "Not Applicable"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/60657",
      "tags": [
        "Broken Link",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.us-cert.gov/ncas/alerts/TA13-169A",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2014:0414",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=975118",
      "tags": [
        "Issue Tracking"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703",
      "tags": [
        "Broken Link"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.vicarius.io/vsociety/posts/cve-2013-2465-detect-java-vulnerability",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.vicarius.io/vsociety/posts/cve-2013-2465-mitigate-java-vulnerability",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2465",
      "tags": [
        "US Government Resource"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-693"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.  NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image channel verification\" in 2D."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en el componente Java Runtime Environment (JRE) en Java SE versión 7 Update 21 y anteriores, versión 6 Update 45 y anteriores, y versión 5.0 Update 45 y anteriores, y OpenJDK versión 7 de Oracle, permite a los atacantes remotos afectar la confidencialidad, integridad y disponibilidad por medio de vectores desconocidos relacionados con 2D. NOTA: la información previa es de la CPU de junio de 2013. Oracle no ha comentado sobre las afirmaciones de otro proveedor de que este problema permite a los atacantes remotos omitir el sandbox de Java por medio de vectores relacionados con la \"Incorrect image attribute verification\" en 2D."
    }
  ],
  "lastModified": "2026-06-16T23:53:30.330",
  "cisaActionDue": "2022-04-18",
  "cisaExploitAdd": "2022-03-28",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DFAA351A-93CD-46A8-A480-CE2783CCD620"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F4B153FD-E20B-4909-8B10-884E48F5B590"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F21933FB-A27C-4AF3-9811-2DE28484A5A6"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B2B20041-EB5D-4FA4-AC7D-C35E7878BCFD"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update13:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3C3C9C7-73AE-4B1D-AA85-C7F5330A4DE6"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update15:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D8BB8D7-D5EC-42D6-BEAA-CB03D1D6513E"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update17:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37B5B98B-0E41-4397-8AB0-C18C6F10AED1"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CB106FA9-26CE-48C5-AEA5-FD1A5454AEE2"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update21:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FF6C211-AD55-40FE-9130-77164E586F62"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5831D70B-3854-4CB8-B88D-40F1743DAEE0"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEB101C9-CA38-4421-BC0C-C1AD47AA2CC9"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA302DF3-ABBB-4262-B206-4C0F7B5B1E91"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9A8EBCB-5E6A-42F0-8D07-F3A3D1C850F0"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CD8A54E-185B-4D34-82EF-C0C05739EC12"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4FFC7F0D-1F32-4235-8359-277CE41382DF"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB864346-1429-46B5-A91E-A1126C486421"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update22:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF13B96D-1F80-4672-8DA3-F86F6D3BF070"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update23:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1A2D440-D966-41A6-955D-38B28DDE0FDB"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update24:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1C57774-AD93-4162-8E45-92B09139C808"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update25:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CD7C4194-D34A-418F-9B00-5C6012844AAE"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update26:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAF7D86B-1B4D-4E1F-9EF0-DA7E419D7E99"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update27:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0B82FB1-0F0E-44F9-87AE-628517279E4D"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update29:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0A67640-2F4A-488A-9D8F-3FE1F4DA8DEF"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update30:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0D60D98D-4363-44A0-AAB4-B61BA623EE21"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update31:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "23CDA4F0-C32B-4B08-A377-7D4426C2F569"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update32:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8E76476E-4120-46A9-90A8-A95FE89636CD"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update33:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97A84689-0CED-404F-8DC3-708BEB37D2CE"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update34:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "738EC3E5-A4EB-47FE-9C9A-7C8E8C669765"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update35:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FF56E0D9-612D-4215-9C76-560AE0661A05"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update37:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA717604-4BB0-4968-B258-7C9F884016FF"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update38:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AA71FCF4-580F-432D-AADC-65A2A92CEBC8"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update39:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F1E1A8F3-5A63-401E-9BDA-ACCA30FF6AC8"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update41:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C91517E-4C81-4D09-9FCB-B7AC769C7107"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update43:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B276B96-66BE-4C09-BE9F-11FA7461CBDF"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.6.0:update45:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "626E11CA-20EE-4AB0-84D7-8DAE7A9D8960"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "09027C19-D442-446F-B7A8-21DB6787CF43"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A0FEC28-0707-4F42-9740-78F3D2D551EE"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3C5879A-A608-4230-9DC1-C27F0F48A13B"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C71089A-BDDE-41FC-9DF9-9AEF4C2374DF"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2DBB6B73-8D6B-41FF-BEE0-E0C7F5F1EB41"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12A3B254-8580-45DB-BDE4-5B5A29CBFFB3"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DB1DE6A-66AE-499B-AD92-9E6ACE474C6D"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AADBB4F9-E43E-428B-9979-F47A15696C85"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49260B94-05DE-4B78-9068-6F5F6BFDD19E"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_18:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4FDE9EB-08FE-436E-A265-30E83B15DB23"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_19:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE409D5C-8F9F-4DE9-ACB7-0E0B813F6399"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B08C075B-9FC0-4381-A9E4-FFF0362BD308"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_21:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F587E635-3A15-4186-B6A1-F99BE0A56820"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90EC6C13-4B37-48E5-8199-A702A944D5A6"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2528152C-E20A-4D97-931C-A5EC3CEAA06D"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A99DAB4C-272B-4C91-BC70-7729E1152590"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30DFC10A-A4D9-4F89-B17C-AB9260087D29"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "272A5C44-18EC-41A9-8233-E9D4D0734EA6"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.6.0:update_9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81C2C04D-D4BA-4C87-9609-C53AA63BFF19"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.5.0:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D8730889-A618-4CF9-888C-BF95802DD00F"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.5.0:update36:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC062AE6-515B-4D40-9B86-46F7A1D7FF1C"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.5.0:update38:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B4A2D725-A7DC-4802-A377-5C3963AD9941"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.5.0:update39:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A47E0A76-D6A3-445E-84C8-038497655BBC"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.5.0:update40:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A3C6E1D8-B96E-40FB-9E66-9B3A5325E78B"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.5.0:update41:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F08A5AAD-84CA-491F-83D3-CEFFD16212E0"
            },
            {
              "criteria": "cpe:2.3:a:oracle:jre:1.5.0:update45:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A13547EA-EF77-493A-A863-F09E2AEE8BD4"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7FC09E8-7F30-4FE4-912E-588AA250E2A3"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A586DE4E-8A46-41DE-9FDB-5FDB81DCC87B"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9919D091-73D7-465A-80FF-F37D6CAF9F46"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02565D6F-4CB2-4671-A4EF-3169BCFA6154"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "452A3E51-9EAC-451D-BA04-A1E7B7D917EB"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E8C6AAC-C90B-4220-A69B-2A886A35CF5D"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "55231B6B-9298-4363-9B5A-14C2DA7B1F50"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E42CF0F7-418C-4BB6-9B73-FA3B9171D092"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A5467E9D-07D8-4BEB-84D5-A3136C133519"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B83B2CE1-45D7-47AD-BC0A-6EC74D5F8F5A"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8A32F326-EA92-43CD-930E-E527B60CDD3B"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EA5B9E9-654D-44F7-AE98-3D8B382804AC"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04344167-530E-4A4D-90EF-74C684943DF1"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0E0373B-201D-408F-9234-A7EFE8B4970D"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update22:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15EAD76D-D5D0-4984-9D07-C1451D791083"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update23:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE949EBF-2BC0-4355-8B28-B494023D45FE"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update24:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7E0A0A2D-62B9-4A00-84EF-90C15E47A632"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update25:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A070A282-CBD6-4041-B149-5E310BD12E7B"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update26:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3ECAE71B-C549-4EFB-A509-BFD599F5917A"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update27:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "044BADDD-A80B-4AE2-8595-5F8186314550"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update28:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7FC11BE-8CF7-4D45-BB4A-3EFA1DDBB10D"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update29:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D75C40D-62AE-47F2-A6E0-53F3495260BD"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44051CFE-D15D-4416-A123-F3E49C67A9E7"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update31:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C061911-FB19-45EB-8E88-7450224F4023"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update33:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0E8009BC-F5A8-4D00-9F5F-8635475C6065"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F296ACF3-1373-429D-B991-8B5BA704A7EF"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B863420B-DE16-416A-9640-1A1340A9B855"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "724C972F-74FE-4044-BBC4-7E0E61FC9002"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46F41C15-0EF4-4115-BFAA-EEAD56FAEEDB"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBE909DE-E55A-4BD3-A5BF-ADE407432193"
            },
            {
              "criteria": "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DAC04D2-68FD-4793-A8E7-4690A543D7D4"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4339DE06-19FB-4B8E-B6AE-3495F605AD05"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_java:10:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3CF5C5B9-2CB9-4CD8-B94F-A674ED909CC3"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_java:11:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "252CF7A7-3FEB-4503-AEE8-B67139C5B0D5"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_java:11:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "79D7DBBA-6849-45F7-AFEF-C765569C481A"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:ltss:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CED02712-1031-4206-AC4D-E68710F46EC9"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:10:sp4:*:*:-:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1D7B467-58DD-45F1-9F1F-632620DF072A"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:-:*:*",
              "vulnerable": true,
              "matchCriteriaId": "88D6E858-FD8F-4C55-B7D5-CEEDA2BBA898"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB4D6749-81A1-41D7-BF4F-1C45A7F49A22"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E534C201-BCC5-473C-AAA7-AAB97CEB5437"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2470C6E8-2024-4CF5-9982-CFF50E88EAE9"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5AA37837-3083-4DC7-94F4-54FD5D7CB53C"
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F7F8866-DEAD-44D1-AB10-21EE611AA026"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "Per: http://www.oracle.com/technetwork/topics/security/javacpujun2013-1899847.html\n\n'Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets.'",
  "sourceIdentifier": "secalert_us@oracle.com",
  "cisaRequiredAction": "Apply updates per vendor instructions.",
  "cisaVulnerabilityName": "Oracle Java SE Unspecified Vulnerability"
}