CVE-2013-5823
No CVSS score yet. EPSS 4.7% chance of exploitation in the next 30 days. Fixed in org.apache.santuario:xmlsec 1.4.8, 1.5.3.
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via unknown vectors related to Security.
- EPSS
- 4.7% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- oracle:jdk
- oracle:jre
- oracle:jrockit
- sun:jdk
- sun:jre
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8gwc-x7mg-7p7p | Maven | org.apache.santuario:xmlsec | >=1.4.0 <1.4.8 | 1.4.8 |
| GHSA-8gwc-x7mg-7p7p | Maven | org.apache.santuario:xmlsec | >=1.5.0 <1.5.3 | 1.5.3 |
References
- http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00023.html
- http://marc.info/?l=bugtraq&m=138674031212883&w=2