UpHeron
All vulnerabilities

Servers and applications

CVE-2013-1490

Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a different vulnerability than CVE-2013-0431. NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being…

Severity
Medium 4.3
Published
31 Jan 2013
Last changed
16 Jun 2026
Added to UpHeron
22 Oct 2026
Exploit chance
2.7% in the next 30 daysHigher than 86% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Over the network · No login needed
Attacker can
Change some data
CVSS vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Sources
NVD

Description

Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a different vulnerability than CVE-2013-0431. NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being assigned because this vulnerability has received significant public attention, and the original researcher has an established history of releasing vulnerability reports that have been fixed by vendors. NOTE: this issue also exists in SE 6, but it cannot be exploited without a separate vulnerability.

From NVD.

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:jdk
  • Version 1.7.0-update11
JavaServers and applications · cpe:a:oracle:jre
  • Version 1.7.0-update11

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-1490
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-1490