CVE-2013-0431Low· 3.7▾ Twilight⚠ Exploited in the wildPoC availableUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 20.4 · likelihood 18 · exploitation 25 · ransomware 5
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 2 sources. Availability, not in-the-wild use.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Aug 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Federal remediation due Jun 15, 2022
90%
90% → 90%
5.3 → 3.7
medium → low
Last analysed / modified upstream
Exploit-DB · Metasploit ×1 (last check)
Added to the CISA catalog on May 25, 2022. Federal remediation due Jun 15, 2022. View catalog ↗
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.
jre = 1.7.0openjdk = 7Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2012-0507Critical· 9.8Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and …
CVE-2026-22016High· 7.5Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)
CVE-2026-34282High· 7.5Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)
CVE-2026-46968Medium· 5.9Vulnerability in Oracle Java SE (component: JSSE)
CVE-2026-102539Medium· 5.7Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities
CVE-2026-101899Medium· 6.9Axios is a promise-based HTTP client for the browser and Node.js