All vulnerabilitiesServers and applications
CVE-2013-2421 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related…
Severity High 9.3
Published 17 Apr 2013
Last changed 16 Jun 2026
Added to UpHeron 22 Oct 2026
Sources NVD Affected software Software Affected versions JavaServers and applications · cpe:a:oracle:jdk Version 1.7.0-update15 Version 1.7.0-update13 Version 1.7.0-update11 Version 1.7.0-update10 All 14 release lines Every version up to 1.7.0 Version 1.7.0 Version 1.7.0-update1 Version 1.7.0-update2 Version 1.7.0-update3 Version 1.7.0-update4 Version 1.7.0-update5 Version 1.7.0-update6 Version 1.7.0-update7 Version 1.7.0-update9 Version 1.7.0-update10 Version 1.7.0-update11 Version 1.7.0-update13 Version 1.7.0-update15 JavaServers and applications · cpe:a:oracle:jre Version 1.7.0-update15 Version 1.7.0-update13 Version 1.7.0-update11 Version 1.7.0-update10 All 14 release lines Every version up to 1.7.0 Version 1.7.0 Version 1.7.0-update1 Version 1.7.0-update2 Version 1.7.0-update3 Version 1.7.0-update4 Version 1.7.0-update5 Version 1.7.0-update6 Version 1.7.0-update7 Version 1.7.0-update9 Version 1.7.0-update10 Version 1.7.0-update11 Version 1.7.0-update13 Version 1.7.0-update15
References NVD https://nvd.nist.gov/vuln/detail/CVE-2013-2421 CVE.org https://www.cve.org/CVERecord?id=CVE-2013-2421