CVE-2013-0431
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote...
- Published
- Jan 31, 2013
- Updated
- Oct 1, 2026
- Assigning CNA
- oracle
- Evidence observed
- Feb 25, 2013
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NHigh · next 30 days
- Percentile
- 99.8%
- Model date
- Oct 16, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.
Sources
modules/exploits/multi/browser/java_jre17_jmxbean_2.rb
Metasploit Framework modulesDeclared conditions
- platform: Java,Linux,OSX,Windows($.exploit_multi/browser/java_jre17_jmxbean_2.platform)
- verification: check_not_declared($.exploit_multi/browser/java_jre17_jmxbean_2.check)
Metasploit · multiple · Feb 25, 2013
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.