{"id":"CVE-2013-2423","published":"2013-04-17T18:55:07Z","modified":"2026-06-16T23:53:20Z","title":"Oracle JRE Unspecified Vulnerability","vendor":"Oracle","product":"Java Runtime Environment (JRE)","tier":"core","eol":{"product":"Java SE 7","since":"2015-04-14","note":"No security updates; remove it."},"description":{"text":"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot.  NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.","provenance":"source","from":"NVD"},"summary":{"text":"The Java Runtime Environment (JRE) component of Oracle Java SE 7 Update 17 and earlier, as well as OpenJDK 7, contains an unspecified flaw in its HotSpot code that allows an attacker to affect data integrity. A remote attacker could exploit it via unknown vectors, with the attack requiring high complexity and no authentication or user interaction.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:10:58Z"},"cvss":{"score":3.7,"severity":"LOW","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","provenance":"source","from":"NVD"},"epss":{"score":0.85215,"percentile":0.99714,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2022-05-25","dueDate":"2022-06-15","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2423","provenance":"source"},"vulncheckKev":{"dateAdded":"2013-05-20","exploitedFirstSeen":"2013-05-20","ransomware":true,"evidence":[{"url":"https://www.fireeye.com/blog/threat-research/2013/05/ready-for-summer-the-sunshop-campaign.html","date":"2013-05-20"},{"url":"https://krebsonsecurity.com/2013/07/styx-exploit-pack-domo-arigato-pc-roboto/","date":"2013-07-08"},{"url":"https://cybersecurityworks.com/pdf/ransomware/Spotlight_Ransomware2021.pdf","date":"2021-02-11"},{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"},{"url":"https://www.mandiant.com/sites/default/files/2021-09/rpt-java-vulnerabilities.pdf","date":"2021-09-01"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-05-25"}],"evidenceTotal":6,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[{"id":"CWE-284","name":"Improper Access Control"}],"references":[{"url":"http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/","tags":["Broken Link"]},{"url":"http://blog.spiderlabs.com/2013/04/java-is-so-confusing.html","tags":["Not Applicable"]},{"url":"http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b453d9be6b3f","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0752.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0757.html","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","tags":["Third Party Advisory"]},{"url":"http://weblog.ikvm.net/PermaLink.aspx?guid=acd2dd6d-1028-4996-95df-efa42ac237f0","tags":["Broken Link"]},{"url":"http://www.exploit-db.com/exploits/24976","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:161","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1806-1","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA13-107A","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952398","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16700","tags":["Broken Link"]},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130","tags":["Third Party Advisory"]},{"url":"http://blog.fuseyism.com/index.php/2013/04/22/security-icedtea-2-3-9-for-openjdk-7-released/","tags":["Broken Link"]},{"url":"http://blog.spiderlabs.com/2013/04/java-is-so-confusing.html","tags":["Not Applicable"]},{"url":"http://hg.openjdk.java.net/jdk7u/jdk7u-dev/jdk/rev/b453d9be6b3f","tags":["Patch"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-06/msg00099.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0752.html","tags":["Third Party Advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0757.html","tags":["Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201406-32.xml","tags":["Third Party Advisory"]},{"url":"http://weblog.ikvm.net/PermaLink.aspx?guid=acd2dd6d-1028-4996-95df-efa42ac237f0","tags":["Broken Link"]},{"url":"http://www.exploit-db.com/exploits/24976","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:161","tags":["Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html","tags":["Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/USN-1806-1","tags":["Third Party Advisory"]},{"url":"http://www.us-cert.gov/ncas/alerts/TA13-107A","tags":["Third Party Advisory","US Government Resource"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=952398","tags":["Issue Tracking"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16700","tags":["Broken Link"]},{"url":"https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0130","tags":["Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2423","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve","ai-mapping"],"basisDetail":"CTID attack_to_cve (Phase 1); claude-haiku-5-5: remote drive-by exploitation of Java runtime component","mappingType":"uncategorized","evidence":[{"from":"description","quote":"allows remote attackers to affect integrity via unknown vectors","start":132,"end":195}],"confidence":"low","confidenceNote":"server-side bug exploitable without user interaction; client-execution technique does not fit"},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 1)","mappingType":"uncategorized","evidence":[],"confidence":"low","confidenceNote":"server-side bug exploitable without user interaction; client-execution technique does not fit"},{"id":"T1211","name":"Exploitation for Stealth","tactics":["stealth"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: bypasses Java security manager permission checks","mappingType":"primary_impact","evidence":[{"from":"description","quote":"bypass permission checks by the MethodHandles method","start":391,"end":443}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-93c55e10ab45afc37c85","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf","date":null,"mentions":[{"quote":"Adobe Flash Player (CVE-2015-8651 and CVE-2015-0311), Java (CVE-2013-\r\n2423, CVE-2013-1493, and CVE-2012-1723), and Silverlight (CVE-2013-3896","start":100025,"end":100167},{"quote":"CVE-2013-2423, 56","start":261464,"end":261481}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2013-2369","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2369","exploited":true,"exploitedSince":"2022-05-25","provenance":"source"},"exploits":[{"id":24976,"url":"https://www.exploit-db.com/exploits/24976","title":"Java Applet - Reflection Type Confusion Remote Code Execution (Metasploit)","type":"remote","platform":"multiple","date":"2013-04-23","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2013-04-23"},"metasploit":[{"name":"Java Applet Reflection Type Confusion Remote Code Execution","module":"exploit/multi/browser/java_jre17_reflection_types","type":"exploit","disclosureDate":"2013-01-10","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_reflection_types.rb"}],"first":{"date":"2013-01-10","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_reflection_types.rb"},"provenance":"source"},"exploitRefs":["http://www.exploit-db.com/exploits/24976"],"flow":[{"stage":"primary","techniques":["T1211"],"provenance":"ai"},{"stage":"related","techniques":["T1189","T1203"],"provenance":"source","lowConfidence":true}],"timeline":[{"date":"2013-01-10","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2013-04-23","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_jre17_reflection_types.rb","provenance":"source"},{"date":"2013-04-17","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-2423","provenance":"source"},{"date":"2013-05-20","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.fireeye.com/blog/threat-research/2013/05/ready-for-summer-the-sunshop-campaign.html","provenance":"source"},{"date":"2022-05-25","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-05-25","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-2369","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":3325},"priority":{"score":64.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 4910 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"CISA KEV and VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.94,"detail":"percentile 0.9971"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 1 NVD exploit link; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":2.59,"detail":"base score 3.7"},{"name":"End-of-life product","points":-15.0,"detail":"No patches exist; remove or isolate it"}]}}