CVE-2013-1490

Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a different vulnerability than CVE-2013-0431. NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being assigned because this vulnerability has received significant public attention, and the original researcher has an established history of releasing vulnerability reports that have been fixed by vendors. NOTE: this issue also exists in SE 6, but it cannot be exploited without a separate vulnerability.

• http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/
• http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53
• http://seclists.org/fulldisclosure/2013/Jan/142
• http://seclists.org/fulldisclosure/2013/Jan/195
• http://www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717
• http://www.securityfocus.com/archive/1/525387/30/0/threaded
• http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version/
• http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53
• http://seclists.org/fulldisclosure/2013/Jan/142
• http://seclists.org/fulldisclosure/2013/Jan/195
• http://www.informationweek.com/security/application-security/java-hacker-uncovers-two-flaws-in-latest/240146717
• http://www.securityfocus.com/archive/1/525387/30/0/threaded

Published

Jan 31, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1484Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1485Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1486Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1487Unspecified vulnerability in the Java Runtime Environment co…
• CVE-2013-1488The Java Runtime Environment (JRE) component in Oracle Java …
• CVE-2013-1489Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-1491The Java Runtime Environment (JRE) component in Oracle Java …
• CVE-2013-1492Buffer overflow in yaSSL, as used in MySQL 5.1.x before 5.1.…
• CVE-2013-1493The color management (CMM) functionality in the 2D component…
• CVE-2013-1494Unspecified vulnerability in Oracle Sun Solaris 10, when run…
• CVE-2013-1495asr in Oracle Auto Service Request in Oracle Support Tools b…
• CVE-2013-1496Unspecified vulnerability in Oracle Sun Solaris 10 and 11 al…