CVE-2013-5906

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5905.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=139402697611681&w=2Third Party Advisory
http://marc.info/?l=bugtraq&m=139402749111889&w=2Third Party Advisory
http://osvdb.org/102010Broken Link
http://rhn.redhat.com/errata/RHSA-2014-0030.htmlThird Party Advisory
http://secunia.com/advisories/56485Permissions Required
http://secunia.com/advisories/56535Permissions Required
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlVendor Advisory
http://www.securityfocus.com/bid/64758Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/64903Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029608Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2014:0414
https://exchange.xforce.ibmcloud.com/vulnerabilities/90342
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777Third Party Advisory
http://marc.info/?l=bugtraq&m=139402697611681&w=2Third Party Advisory
http://marc.info/?l=bugtraq&m=139402749111889&w=2Third Party Advisory
http://osvdb.org/102010Broken Link
http://rhn.redhat.com/errata/RHSA-2014-0030.htmlThird Party Advisory
http://secunia.com/advisories/56485Permissions Required
http://secunia.com/advisories/56535Permissions Required
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlVendor Advisory
http://www.securityfocus.com/bid/64758Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/64903Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029608Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2014:0414
https://exchange.xforce.ibmcloud.com/vulnerabilities/90342
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777Third Party Advisory

Timeline

Published: Jan 15, 2014
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-590710.0Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows CVE-2013-59082.6Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allow CVE-2013-59094.9Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated CVE-2013-59105.0Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity CVE-2013-59114.3Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrar CVE-2013-591210.0VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via CVE-2013-59134.3Cross-site scripting (XSS) vulnerability in the getRecommSearch function in recommlist.php in OXID eShop before 4.6.7, Professional and Comm CVE-2013-59146.8Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to e CVE-2013-59154.3The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers CVE-2013-59164.3Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin,CVE-2013-59177.5SQL injection vulnerability in wp-comments-post.php in the NOSpam PTI plugin 2.1 for WordPress allows remote attackers to execute arbitrary CVE-2013-59184.3Cross-site scripting (XSS) vulnerability in platinum_seo_pack.php in the Platinum SEO plugin before 1.3.8 for WordPress allows remote attack