CVE-2013-0422

highpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.970 · 100 %ileexploit · weaponizedEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 2 exploits · weaponized

Likely / severe?

97.0% (100th) EPSS

CVSS 10 · high

Is it mine?

93 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · redhat_csaf

added 2022-05-25remediate by 2022-06-15

required action Apply updates per vendor instructions.

EPSS · scored 2026-10-27

Oracle JRE Remote Code Execution Vulnerability

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114. CVE-2013-0422 covers both the JMX/MBean and Reflection API issues. NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks. NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11. If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1.src as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-debuginfo-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-demo-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-devel-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.1.el6_3.noarch as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.1.el6_3.noarch as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.1.el6_3.noarch as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.1.el6_3.noarch as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-javadoc-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.1.el6_3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.el5_9.1.i386 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165
Fixedjava-1.7.0-openjdk-src-1:1.7.0.9-2.3.4.el5_9.1.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)redhat_csaf
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
https://access.redhat.com/errata/RHSA-2013:0165

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–critical · 6.8–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 10 · impact 10

v2.06.8mediumAV:N/AC:M/Au:N/C:P/I:P/A:Psecondary · Red Hat Product Security US

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-264USCWE-284US

exploits (2)

Public proof-of-concept and weaponised exploit code.

exploit/multi/browser/java_jre17_jmxbeanJava Applet JMX Remote Code Executionweaponized · metasploit
EDB-24045Java Applet JMX - Remote Code Execution (Metasploit) (1)functional · exploit_db

affected products (93)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Canonical Ltd. Ubuntu≤ 12.10fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 11 SP2fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 12 SP3fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 12 SP4fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 12 SP2fstec_bduRU
Novell Inc. Suse Linux Enterprise Desktop≤ 12fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP4fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP3fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 11 SP3fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP5fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 11 SP2fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP1fstec_bduRU
Novell Inc. Suse Linux Enterprise Server≤ 12 SP2fstec_bduRU
Oracle Corp. Java Runtime Environment≤ 7 Update 10fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ Desktop 6fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ Desktop 5fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux Server≤ 6fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux Server≤ 5fstec_bduRU

showing 20 of 93

advisories (1)

Vendor and ecosystem advisories describing this.

RHSA-2013:0165Red Hat Security Advisory: java-1.7.0-openjdk security update2013-01-16csaf · redhat_csafUS
Updated java-1.7.0-openjdk packages that fix two security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu redhat_csaf NVD CVE.org MITRE

published 2013-01-10modified 2026-06-16

references (47)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan