Servers and applications
CVE-2013-2465 Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims…
Severity Critical 9.8
Published 18 Jun 2013
Last changed 16 Jun 2026
Added to UpHeron 22 Oct 2026
Sources NVD Affected software Software Affected versions JavaServers and applications · cpe:a:oracle:jre Version 1.7.0-update21 Version 1.7.0-update17 Version 1.7.0-update15 Version 1.7.0-update13 All 42 release lines Version 1.5.0 Version 1.5.0-update36 Version 1.5.0-update38 Version 1.5.0-update39 Version 1.5.0-update40 Version 1.5.0-update41 Version 1.5.0-update45 Version 1.6.0 Version 1.6.0-update22 Version 1.6.0-update23 Version 1.6.0-update24 Version 1.6.0-update25 Version 1.6.0-update26 Version 1.6.0-update27 Version 1.6.0-update29 Version 1.6.0-update30 Version 1.6.0-update31 Version 1.6.0-update32 Version 1.6.0-update33 Version 1.6.0-update34 Version 1.6.0-update35 Version 1.6.0-update37 Version 1.6.0-update38 Version 1.6.0-update39 Version 1.6.0-update41 Version 1.6.0-update43 Version 1.6.0-update45 Version 1.7.0 Version 1.7.0-update1 Version 1.7.0-update2 Version 1.7.0-update3 Version 1.7.0-update4 Version 1.7.0-update5 Version 1.7.0-update6 Version 1.7.0-update7 Version 1.7.0-update9 Version 1.7.0-update10 Version 1.7.0-update11 Version 1.7.0-update13 Version 1.7.0-update15 Version 1.7.0-update17 Version 1.7.0-update21
Known exploited
CISA name Oracle Java SE Unspecified Vulnerability
Required action Apply updates per vendor instructions.
Due for US agencies 18 Apr 2022
Used in ransomware Yes, known References NVD https://nvd.nist.gov/vuln/detail/CVE-2013-2465 CVE.org https://www.cve.org/CVERecord?id=CVE-2013-2465