CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2013-04-17
Oracle Java SE 7 & OpenJDK 7 HotSpot Type Confusion Security Manager Bypass (CVE-2013-2423)
[Affected Scope] Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7
[Impact] Remote attackers can bypass permission checks via MethodHandles, modify arbitrary public final fields using reflection and type confusion, and disable the Security Manager to compromise system integrity
[Mitigation] Immediately upgrade to Oracle Java SE 7 Update 21 or apply the latest OpenJDK 7 patches