CVE-2013-0431

Oracle JRE Sandbox Bypass Vulnerability

3.7
CVSS 3.1
90.2 %
EPSS (current)
2022-05-25
KEV addition
Yes
Ransomware

Timeline

Publication, first public exploit and KEV addition on a day axis.

Key facts

Vendor / product: Oracle / Java Runtime Environment (JRE)

Published: 2013-01-31 · Due (CISA): 2022-06-15

CWE: CWE-693 · EU list: no

Exploit references (metadata only)

SourceReferenceTitleDate
metasploitexploit/multi/browser/java_jre17_jmxbean_2exploit/multi/browser/java_jre17_jmxbean_22013-01-19
exploitdb24539Java Applet JMX - Remote Code Execution (Metasploit) (2)2013-02-25

References only — no downloads or instructions.

Sources