[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkMe92c9PGcCe0Lv2E-owWZPr__ort_ewgHH1JKheuVE":3,"g5a-risk:CVE-2013-2423":265},{"success":4,"data":5,"meta":263},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":26,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":63,"references":64,"referencesCount":171,"weaknesses":172,"weaknessesCount":181,"isActivelyExploited":4,"cisaInfo":182,"otxData":26,"relatedBlogPosts":183,"seoMetadata":184,"configurations":209,"relatedVendorCves":261,"notableEvents":262},"CVE-2013-2423","What is CVE-2013-2423?","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers t...","2013-04-17T18:55:07.087","2026-06-16T23:53:20.027",3.7,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":44},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","LOW",null,2.2,1.4,[],[31],{"Source":32,"Type":33,"CVSSData":34,"BaseSeverity":37,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":43,"ObtainAllPrivilege":43,"ObtainUserPrivilege":43,"ObtainOtherPrivilege":43,"UserInteractionRequired":43},"nvd@nist.gov","Primary",{"Version":35,"VectorString":36,"AccessVector":21,"AccessComplexity":37,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":38,"AvailabilityImpact":23,"BaseScore":39,"BaseSeverity":40,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","MEDIUM","PARTIAL",4.3,"",8.6,2.9,false,[],0.85215,[45,45,45,45,45,45,45],"Low",[49,54,59],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"oracle","jre","1.7.0","cpe:2.3:a:oracle:jre:1.7.0:-:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"canonical","ubuntu_linux","12.10","cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*",{"vendor":60,"product":60,"version":61,"criteria":62,"vulnerable":4},"opensuse","12.3","cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*",3,[65,70,75,80,85,89,92,96,100,105,109,114,118,123,127,131,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,165,167],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fblog.fuseyism.com\u002Findex.php\u002F2013\u002F04\u002F22\u002Fsecurity-icedtea-2-3-9-for-openjdk-7-released\u002F","Fuseyism",[69],"Broken Link",{"url":71,"source":72,"tags":73},"http:\u002F\u002Fblog.spiderlabs.com\u002F2013\u002F04\u002Fjava-is-so-confusing.html","Spiderlabs",[74],"Not Applicable",{"url":76,"source":77,"tags":78},"http:\u002F\u002Fhg.openjdk.java.net\u002Fjdk7u\u002Fjdk7u-dev\u002Fjdk\u002Frev\u002Fb453d9be6b3f","Java",[79],"Patch",{"url":81,"source":82,"tags":83},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-updates\u002F2013-06\u002Fmsg00099.html","Opensuse",[84],"Third Party Advisory",{"url":86,"source":87,"tags":88},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2013-0752.html","Red Hat",[84],{"url":90,"source":87,"tags":91},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2013-0757.html",[84],{"url":93,"source":94,"tags":95},"http:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002Fglsa-201406-32.xml","Gentoo",[84],{"url":97,"source":98,"tags":99},"http:\u002F\u002Fweblog.ikvm.net\u002FPermaLink.aspx?guid=acd2dd6d-1028-4996-95df-efa42ac237f0","Ikvm",[69],{"url":101,"source":102,"tags":103},"http:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F24976","Exploit-db",[84,104],"VDB Entry",{"url":106,"source":107,"tags":108},"http:\u002F\u002Fwww.mandriva.com\u002Fsecurity\u002Fadvisories?name=MDVSA-2013:161","Mandriva",[84],{"url":110,"source":111,"tags":112},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fjavacpuapr2013-1928497.html","Oracle",[113],"Vendor Advisory",{"url":115,"source":116,"tags":117},"http:\u002F\u002Fwww.ubuntu.com\u002Fusn\u002FUSN-1806-1","Ubuntu",[84],{"url":119,"source":120,"tags":121},"http:\u002F\u002Fwww.us-cert.gov\u002Fncas\u002Falerts\u002FTA13-107A","Us-cert",[84,122],"US Government Resource",{"url":124,"source":87,"tags":125},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=952398",[126],"Issue Tracking",{"url":128,"source":129,"tags":130},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A16700","Cisecurity",[69],{"url":132,"source":133,"tags":134},"https:\u002F\u002Fwiki.mageia.org\u002Fen\u002FSupport\u002FAdvisories\u002FMGASA-2013-0130","Mageia",[84],{"url":66,"source":67,"tags":136},[69],{"url":71,"source":72,"tags":138},[74],{"url":76,"source":77,"tags":140},[79],{"url":81,"source":82,"tags":142},[84],{"url":86,"source":87,"tags":144},[84],{"url":90,"source":87,"tags":146},[84],{"url":93,"source":94,"tags":148},[84],{"url":97,"source":98,"tags":150},[69],{"url":101,"source":102,"tags":152},[84,104],{"url":106,"source":107,"tags":154},[84],{"url":110,"source":111,"tags":156},[113],{"url":115,"source":116,"tags":158},[84],{"url":119,"source":120,"tags":160},[84,122],{"url":124,"source":87,"tags":162},[126],{"url":128,"source":129,"tags":164},[69],{"url":132,"source":133,"tags":166},[84],{"url":168,"source":169,"tags":170},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2423","CISA",[122],33,[173],{"id":174,"name":175,"description":176,"extendedDescription":177,"status":178,"abstraction":179,"structure":180},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",1,{"shortDescription":40,"requiredAction":40,"vulnerabilityName":40,"dateAdded":26},[],{"title":185,"metaDescription":186,"keywords":187,"canonicalUrl":188,"structuredData":189},"What is CVE-2013-2423? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2013-2423, a low severity cyber security vulnerability from 2013. High exploit probability (85.2%). Unspecified vulnerability i...","CVE-2013-2423, CVE-2013-2423 vulnerability, CVE-2013-2423 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2013, CVSS score, exploit, patch, remediation, oracle security, canonical security, opensuse security, jre vulnerability, ubuntu_linux vulnerability, opensuse vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2013-2423",{"@context":190,"@type":191,"headline":185,"description":186,"datePublished":10,"dateModified":11,"author":192,"publisher":196,"about":200,"mainEntityOfPage":204,"articleSection":207,"keywords":208},"https:\u002F\u002Fschema.org","TechArticle",{"@type":193,"name":194,"url":195},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":193,"name":194,"url":195,"logo":197},{"@type":198,"url":199},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":201,"name":6,"description":202,"additionalType":203},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":205,"@id":206},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2013-2423","Cybersecurity","CVE-2013-2423, CVE-2013-2423 vulnerability, CVE-2013-2423 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[210,253],{"Operator":26,"Negate":26,"Nodes":211},[212],{"Operator":213,"Negate":43,"CPEMatch":214},"OR",[215,217,220,223,226,229,232,235,238,241,244,247,250],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":216,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DFAA351A-93CD-46A8-A480-CE2783CCD620",{"Vulnerable":4,"Criteria":218,"MatchCriteriaID":219,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update1:*:*:*:*:*:*","F4B153FD-E20B-4909-8B10-884E48F5B590",{"Vulnerable":4,"Criteria":221,"MatchCriteriaID":222,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update10:*:*:*:*:*:*","F21933FB-A27C-4AF3-9811-2DE28484A5A6",{"Vulnerable":4,"Criteria":224,"MatchCriteriaID":225,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update11:*:*:*:*:*:*","B2B20041-EB5D-4FA4-AC7D-C35E7878BCFD",{"Vulnerable":4,"Criteria":227,"MatchCriteriaID":228,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update13:*:*:*:*:*:*","F3C3C9C7-73AE-4B1D-AA85-C7F5330A4DE6",{"Vulnerable":4,"Criteria":230,"MatchCriteriaID":231,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update15:*:*:*:*:*:*","1D8BB8D7-D5EC-42D6-BEAA-CB03D1D6513E",{"Vulnerable":4,"Criteria":233,"MatchCriteriaID":234,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update2:*:*:*:*:*:*","CB106FA9-26CE-48C5-AEA5-FD1A5454AEE2",{"Vulnerable":4,"Criteria":236,"MatchCriteriaID":237,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update3:*:*:*:*:*:*","5831D70B-3854-4CB8-B88D-40F1743DAEE0",{"Vulnerable":4,"Criteria":239,"MatchCriteriaID":240,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update4:*:*:*:*:*:*","EEB101C9-CA38-4421-BC0C-C1AD47AA2CC9",{"Vulnerable":4,"Criteria":242,"MatchCriteriaID":243,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update5:*:*:*:*:*:*","BA302DF3-ABBB-4262-B206-4C0F7B5B1E91",{"Vulnerable":4,"Criteria":245,"MatchCriteriaID":246,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update6:*:*:*:*:*:*","F9A8EBCB-5E6A-42F0-8D07-F3A3D1C850F0",{"Vulnerable":4,"Criteria":248,"MatchCriteriaID":249,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update7:*:*:*:*:*:*","0CD8A54E-185B-4D34-82EF-C0C05739EC12",{"Vulnerable":4,"Criteria":251,"MatchCriteriaID":252,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:oracle:jre:1.7.0:update9:*:*:*:*:*:*","4FFC7F0D-1F32-4235-8359-277CE41382DF",{"Operator":26,"Negate":26,"Nodes":254},[255],{"Operator":213,"Negate":43,"CPEMatch":256},[257,259],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":258,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E2076871-2E80-4605-A470-A41C1A8EC7EE",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":260,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DFBF430B-0832-44B0-AA0E-BA9E467F7668",[],[],{"lastModified":11,"cacheTime":264,"version":35},1792347414845,{"score":266,"band":267,"action":268,"scoredAt":269},74,"High","Emergency patch","2026-10-17T06:39:40.416015+00:00"]