All vulnerabilities

Servers and applications

CVE-2013-2458

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to…

Severity
Medium 5.8
Published
18 Jun 2013
Last changed
16 Jun 2026
Added to UpHeron
22 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
JavaServers and applications · cpe:a:oracle:jdk
  • Version 1.7.0-update17
  • Version 1.7.0-update15
  • Version 1.7.0-update13
  • Version 1.7.0-update11
All 15 release lines
  • Every version up to 1.7.0
  • Version 1.7.0
  • Version 1.7.0-update1
  • Version 1.7.0-update2
  • Version 1.7.0-update3
  • Version 1.7.0-update4
  • Version 1.7.0-update5
  • Version 1.7.0-update6
  • Version 1.7.0-update7
  • Version 1.7.0-update9
  • Version 1.7.0-update10
  • Version 1.7.0-update11
  • Version 1.7.0-update13
  • Version 1.7.0-update15
  • Version 1.7.0-update17
JavaServers and applications · cpe:a:oracle:jre
  • Version 1.7.0-update17
  • Version 1.7.0-update15
  • Version 1.7.0-update13
  • Version 1.7.0-update11
All 15 release lines
  • Every version up to 1.7.0
  • Version 1.7.0
  • Version 1.7.0-update1
  • Version 1.7.0-update2
  • Version 1.7.0-update3
  • Version 1.7.0-update4
  • Version 1.7.0-update5
  • Version 1.7.0-update6
  • Version 1.7.0-update7
  • Version 1.7.0-update9
  • Version 1.7.0-update10
  • Version 1.7.0-update11
  • Version 1.7.0-update13
  • Version 1.7.0-update15
  • Version 1.7.0-update17

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2013-2458
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2013-2458