CVE-2013-5910: Oracle JDK

Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that CanonicalizerBase.java in the XML canonicalizer allows untrusted code to access mutable byte arrays.

Affected products

• Oracle JDK: version 1.6.0 only; version 1.7.0 only
• Oracle JRE: version 1.6.0 only; version 1.7.0 only

Published 2014-01-15. Last modified 2026-06-16.