UpHeron
All vulnerabilities

Servers and applications

CVE-2013-0435

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper…

Severity
Medium 5.0
Published
2 Feb 2013
Last changed
16 Jun 2026
Added to UpHeron
22 Oct 2026
Exploit chance
5.2% in the next 30 daysHigher than 92% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Over the network · No login needed
Attacker can
Read some data
CVSS vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Sources
NVD

Description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to improper restriction of com.sun.xml.internal packages and "Better handling of UI elements."

From NVD.

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:jdk
  • Version 1.7.0-update11
  • Version 1.7.0-update10
  • Version 1.7.0-update9
  • Version 1.7.0-update7
All 26 release lines
  • Version 1.6.0-update22
  • Version 1.6.0-update23
  • Version 1.6.0-update24
  • Version 1.6.0-update25
  • Version 1.6.0-update26
  • Version 1.6.0-update27
  • Version 1.6.0-update29
  • Version 1.6.0-update30
  • Version 1.6.0-update31
  • Version 1.6.0-update32
  • Version 1.6.0-update33
  • Version 1.6.0-update34
  • Version 1.6.0-update35
  • Version 1.6.0-update37
  • Version 1.6.0-update38
  • Version 1.7.0
  • Version 1.7.0-update1
  • Version 1.7.0-update2
  • Version 1.7.0-update3
  • Version 1.7.0-update4
  • Version 1.7.0-update5
  • Version 1.7.0-update6
  • Version 1.7.0-update7
  • Version 1.7.0-update9
  • Version 1.7.0-update10
  • Version 1.7.0-update11
JavaServers and applications · cpe:a:oracle:jre
  • Version 1.7.0-update11
  • Version 1.7.0-update10
  • Version 1.7.0-update9
  • Version 1.7.0-update7
All 26 release lines
  • Version 1.6.0-update22
  • Version 1.6.0-update23
  • Version 1.6.0-update24
  • Version 1.6.0-update25
  • Version 1.6.0-update26
  • Version 1.6.0-update27
  • Version 1.6.0-update29
  • Version 1.6.0-update30
  • Version 1.6.0-update31
  • Version 1.6.0-update32
  • Version 1.6.0-update33
  • Version 1.6.0-update34
  • Version 1.6.0-update35
  • Version 1.6.0-update37
  • Version 1.6.0-update38
  • Version 1.7.0
  • Version 1.7.0-update1
  • Version 1.7.0-update2
  • Version 1.7.0-update3
  • Version 1.7.0-update4
  • Version 1.7.0-update5
  • Version 1.7.0-update6
  • Version 1.7.0-update7
  • Version 1.7.0-update9
  • Version 1.7.0-update10
  • Version 1.7.0-update11

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-0435
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-0435