CVE-2013-5870

{"id": "CVE-2013-5870", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-01-15T16:11:04.957", "references": [{"url": "http://marc.info/?l=bugtraq&m=139402697611681&w=2", "tags": ["Third Party Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://osvdb.org/101994", "tags": ["Broken Link"], "source": "secalert_us@oracle.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2014-0030.html", "tags": ["Third Party Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://secunia.com/advisories/56484", "tags": ["Permissions Required"], "source": "secalert_us@oracle.com"}, {"url": "http://secunia.com/advisories/56485", "tags": ["Permissions Required"], "source": "secalert_us@oracle.com"}, {"url": "http://secunia.com/advisories/56535", "tags": ["Permissions Required"], "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html", "tags": ["Vendor Advisory"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/64758", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securityfocus.com/bid/64929", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert_us@oracle.com"}, {"url": "http://www.securitytracker.com/id/1029608", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert_us@oracle.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90337", "source": "secalert_us@oracle.com"}, {"url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777", "tags": ["Third Party Advisory"], "source": "secalert_us@oracle.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX."}, {"lang": "es", "value": "Vulnerabilidad no especificada en Oracle Java SE 7u45 y JavaFX 2.2.45 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a trav\u00e9s de vectores desconocidos relacionados con JavaFX."}], "lastModified": "2022-05-13T14:57:20.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC2EDDE6-49F2-41D3-BCB2-F49886A2A170"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop_supplementary:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8C6E104-EDBC-481E-85B8-D39ED2058D39"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_hpc_node_supplementary:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "585614D3-1DAA-4256-83DE-AFE901154808"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB3FB071-FCCC-4425-AFBF-77287C1B8F7B"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B74C62D-4A6D-4A4F-ADF6-A508322CD447"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary_aus:6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7B7DCBB-9F6A-4581-B228-ABD724B3DE3B"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server_supplementary_eus:6.5.z:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4ACFB991-B187-45B7-A12E-76C308AD00F8"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation_supplementary:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E89B38A-3697-46DD-BB3F-E8D2373588BE"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:jdk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4B371EE1-8C00-4D83-859C-36693CB563E2", "versionEndIncluding": "7.0.08"}, {"criteria": "cpe:2.3:a:hp:jre:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "69A83E31-2339-4631-9106-DF9BF5D109E6", "versionEndIncluding": "7.0.08"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "12C73959-3E02-4847-8962-651D652800EE"}, {"criteria": "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B64BBA96-FB3C-46AC-9A29-50EE02714FE9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:javafx:2.2.45:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71618CDC-6831-4B3A-AD52-5CBA46954843"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oracle:jre:1.7.0:update45:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5226952-1972-4572-9F8C-C90D89040FD3"}], "operator": "OR"}]}], "evaluatorComment": "Per: http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html\n\n\"Applies to client deployment of Java only. This vulnerability can be exploited only through sandboxed Java Web Start applications and sandboxed Java applets.\"", "sourceIdentifier": "secalert_us@oracle.com"}