Exploited vulnerability

CVE-2013-2465

TLP:CLEAR

Oracle Java SE Unspecified Vulnerability

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D

Facts

Vendor: Oracle
Product: Java SE
CVSS: 9.8
EPSS (probability of exploitation within 30 days): 98.8 %
On CISA's Known Exploited Vulnerabilities list since: 28 March 2022
First known exploitation: 28 March 2022
Used in ransomware campaigns (per CISA): Yes
CISA's deadline for US federal agencies: 18 April 2022
First seen by Risk Letters: 28 March 2022

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD