CVE-2013-0431: Oracle JRE Sandbox Bypass Vulnerability
Low severity, CVSS 3.7. Actively exploited: in CISA KEV since 2022-05-25. EPSS: 90.2% chance of exploitation in the next 30 days.
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.
Affected products
Published 2013-01-31. Last modified 2026-10-02.