VIR Vulnerability Intelligence Relay

CVE-2013-5772

low
Published 2013-10-16 · Modified 2026-04-29
CVSS v3
—
CVSS v2
2.6
VIR risk
2.6

Description

Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u40 and earlier and Java SE 6u60 and earlier allows remote attackers to affect integrity via unknown vectors related to jhat.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Application impact
VendorProductVersionsFixed
oracle oraclejre1.6.0
oracle oraclejre{"endIncluding":"1.6.0"}
sunjre1.6.0
oracle oraclejdk{"endIncluding":"1.6.0"}
oracle oraclejdk1.6.0
sunjdk1.6.0
oracle oraclejre1.7.0
oracle oraclejdk1.7.0

References

Verify integrity in audit chain (admin only). AS-IS.