What’s Vulnerable › Vulnerabilities

CVE-2013-5788

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2013-10-16 · updated 2026-06-16

Description

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

Affected products

• Oracle Java SE: before 1.7.0; 1.7.0, 1.7.0-update1, 1.7.0-update10, 1.7.0-update11, 1.7.0-update13, 1.7.0-update15 (+10) — fixed in 1.7.0
• Oracle Java SE: before 1.7.0; 1.7.0, 1.7.0-update1, 1.7.0-update10, 1.7.0-update11, 1.7.0-update13, 1.7.0-update15 (+10) — fixed in 1.7.0

How to fix

Upgrade to a fixed version: Oracle Java SE 1.7.0; Oracle Java SE 1.7.0. Check the vendor advisory for mitigations.

References

• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
• http://rhn.redhat.com/errata/RHSA-2013-1440.html
• http://rhn.redhat.com/errata/RHSA-2013-1507.html
• http://secunia.com/advisories/56338
• http://www-01.ibm.com/support/docview.wss?uid=swg21655201
• http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18607
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
• http://rhn.redhat.com/errata/RHSA-2013-1440.html
• http://rhn.redhat.com/errata/RHSA-2013-1507.html
• http://secunia.com/advisories/56338
• http://www-01.ibm.com/support/docview.wss?uid=swg21655201

Get alerted when CVE-2013-5788 or the next vulnerability affects your stack