CVE-2013-5870
Estado: ModificadaMedia (6.8)—
Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 4.76%
- Percentil entre todas las CVEs puntuadas: 92
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (10)
HP — JDKHP — JREOracle — JavafxOracle — JRERedhat — Enterprise Linux Desktop SupplementaryRedhat — Enterprise Linux HPC Node SupplementaryRedhat — Enterprise Linux Server SupplementaryRedhat — Enterprise Linux Server Supplementary AUSRedhat — Enterprise Linux Server Supplementary EUSRedhat — Enterprise Linux Workstation Supplementary
CWE
- NVD-CWE-noinfo
Referencias
- http://marc.info/?l=bugtraq&m=139402697611681&w=2
- http://osvdb.org/101994
- http://rhn.redhat.com/errata/RHSA-2014-0030.html
- http://secunia.com/advisories/56484
- http://secunia.com/advisories/56485
- http://secunia.com/advisories/56535
- http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- http://www.securityfocus.com/bid/64758
- http://www.securityfocus.com/bid/64929
- http://www.securitytracker.com/id/1029608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90337
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777
- http://marc.info/?l=bugtraq&m=139402697611681&w=2
- http://osvdb.org/101994
- http://rhn.redhat.com/errata/RHSA-2014-0030.html
- http://secunia.com/advisories/56484
- http://secunia.com/advisories/56485
- http://secunia.com/advisories/56535
- http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- http://www.securityfocus.com/bid/64758
- http://www.securityfocus.com/bid/64929
- http://www.securitytracker.com/id/1029608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90337
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777
JSON original (NVD)
Mostrar
{
"id": "CVE-2013-5870",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert_us@oracle.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2014-01-15T16:11:04.957",
"references": [
{
"url": "http://marc.info/?l=bugtraq&m=139402697611681&w=2",
"tags": [
"Third Party Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://osvdb.org/101994",
"tags": [
"Broken Link"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html",
"tags": [
"Third Party Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://secunia.com/advisories/56484",
"tags": [
"Permissions Required"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://secunia.com/advisories/56485",
"tags": [
"Permissions Required"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://secunia.com/advisories/56535",
"tags": [
"Permissions Required"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
"tags": [
"Vendor Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.securityfocus.com/bid/64758",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.securityfocus.com/bid/64929",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://www.securitytracker.com/id/1029608",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "secalert_us@oracle.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90337",
"source": "secalert_us@oracle.com"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
"tags": [
"Third Party Advisory"
],
"source": "secalert_us@oracle.com"
},
{
"url": "http://marc.info/?l=bugtraq&m=139402697611681&w=2",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/101994",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/56484",
"tags": [
"Permissions Required"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/56485",
"tags": [
"Permissions Required"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/56535",
"tags": [
"Permissions Required"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/64758",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/64929",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1029608",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90337",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en Oracle Java SE 7u45 y JavaFX 2.2.45 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con JavaFX."
}
],
"lastModified": "2026-06-16T23:59:38.293",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC2EDDE6-49F2-41D3-BCB2-F49886A2A170"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8C6E104-EDBC-481E-85B8-D39ED2058D39"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_hpc_node_supplementary:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "585614D3-1DAA-4256-83DE-AFE901154808"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB3FB071-FCCC-4425-AFBF-77287C1B8F7B"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B74C62D-4A6D-4A4F-ADF6-A508322CD447"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary_aus:6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7B7DCBB-9F6A-4581-B228-ABD724B3DE3B"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.5.z:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4ACFB991-B187-45B7-A12E-76C308AD00F8"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E89B38A-3697-46DD-BB3F-E8D2373588BE"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:jdk:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B371EE1-8C00-4D83-859C-36693CB563E2",
"versionEndIncluding": "7.0.08"
},
{
"criteria": "cpe:2.3:a:hp:jre:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69A83E31-2339-4631-9106-DF9BF5D109E6",
"versionEndIncluding": "7.0.08"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "12C73959-3E02-4847-8962-651D652800EE"
},
{
"criteria": "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B64BBA96-FB3C-46AC-9A29-50EE02714FE9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:javafx:2.2.45:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71618CDC-6831-4B3A-AD52-5CBA46954843"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:jre:1.7.0:update45:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5226952-1972-4572-9F8C-C90D89040FD3"
}
],
"operator": "OR"
}
]
}
],
"evaluatorComment": "Per: http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html\n\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets.\"",
"sourceIdentifier": "secalert_us@oracle.com"
}