Vulnerability Details : CVE-2013-5375
Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL.
Exploit prediction scoring system (EPSS) score for CVE-2013-5375
Probability of exploitation activity in the next 30 days: 1.70%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 86 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2013-5375
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST |
References for CVE-2013-5375
-
http://rhn.redhat.com/errata/RHSA-2013-1793.html
RHSA-2013:1793 - Security Advisory - Red Hat Customer Portal
-
http://rhn.redhat.com/errata/RHSA-2013-1509.html
RHSA-2013:1509 - Security Advisory - Red Hat Customer Portal
-
https://www.ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013
Security Vulnerabilities - Java SDKVendor Advisory
-
http://rhn.redhat.com/errata/RHSA-2013-1508.html
RHSA-2013:1508 - Security Advisory - Red Hat Customer Portal
-
http://rhn.redhat.com/errata/RHSA-2013-1507.html
RHSA-2013:1507 - Security Advisory - Red Hat Customer Portal
-
http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html
[security-announce] SUSE-SU-2013:1677-1: important: Security update for
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV51089
IBM IV51089: FIX SECURITY VULNERABILITY CVE-2013-5375
-
http://www-01.ibm.com/support/docview.wss?uid=swg21655202
IBM Security Bulletin: Multiple vulnerabilities in IBM WebSphere Real TimeVendor Advisory
-
http://www-01.ibm.com/support/docview.wss?uid=swg1IV51090
IBM IV51090: FIX SECURITY VULNERABILITY CVE-2013-5375
-
http://www-01.ibm.com/support/docview.wss?uid=swg21655201
IBM Security Bulletin: Multiple vulnerabilities in current releases of the IBM® SDK, Java™ Technology EditionVendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/86901
IBM Java SDK security bypass CVE-2013-5375 Vulnerability Report
Products affected by CVE-2013-5375
- cpe:2.3:a:ibm:java:6.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:java:7.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:java:5.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:java:6.0.1.0:*:*:*:*:*:*:*