CVE-2013-0422CISA KEV
Oracle JRE Remote Code Execution Vulnerability
CISA lists this Oracle Java Runtime Environment (JRE) vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.
- Product
- Java Runtime Environment (JRE)
- Added to KEV
- 25 May 2022
- Federal remediation due
- 15 Jun 2022
- Known ransomware use
- Yes