CVE-2013-5893

Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to improper handling of methods in MethodHandles in HotSpot JVM, which allows attackers to escape the sandbox.

• http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/839100e42498
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html
• http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html
• http://marc.info/?l=bugtraq&m=139402697611681&w=2
• http://osvdb.org/102000
• http://rhn.redhat.com/errata/RHSA-2014-0026.html
• http://rhn.redhat.com/errata/RHSA-2014-0027.html
• http://rhn.redhat.com/errata/RHSA-2014-0030.html
• http://secunia.com/advisories/56432
• http://secunia.com/advisories/56485
• http://secunia.com/advisories/56486
• http://secunia.com/advisories/56535
• http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlVendor Advisory
• http://www.securityfocus.com/bid/64758
• http://www.securityfocus.com/bid/64863
• http://www.securitytracker.com/id/1029608
• http://www.ubuntu.com/usn/USN-2089-1
• https://bugzilla.redhat.com/show_bug.cgi?id=1051549
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777
• http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/839100e42498
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00105.html
• http://lists.opensuse.org/opensuse-updates/2014-01/msg00107.html
• http://lists.opensuse.org/opensuse-updates/2014-02/msg00000.html
• http://marc.info/?l=bugtraq&m=139402697611681&w=2
• http://osvdb.org/102000
• http://rhn.redhat.com/errata/RHSA-2014-0026.html
• http://rhn.redhat.com/errata/RHSA-2014-0027.html
• http://rhn.redhat.com/errata/RHSA-2014-0030.html
• http://secunia.com/advisories/56432
• http://secunia.com/advisories/56485
• http://secunia.com/advisories/56486
• http://secunia.com/advisories/56535
• http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlVendor Advisory
• http://www.securityfocus.com/bid/64758
• http://www.securityfocus.com/bid/64863
• http://www.securitytracker.com/id/1029608
• http://www.ubuntu.com/usn/USN-2089-1
• https://bugzilla.redhat.com/show_bug.cgi?id=1051549
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04166777

Published

Jan 15, 2014

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-5887Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 al…
• CVE-2013-5888Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, w…
• CVE-2013-5889Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 al…
• CVE-2013-5890Unspecified vulnerability in the Oracle Payroll component in…
• CVE-2013-5891Unspecified vulnerability in the MySQL Server component in O…
• CVE-2013-5892Unspecified vulnerability in the Oracle VM VirtualBox compon…
• CVE-2013-5894Unspecified vulnerability in the MySQL Server component in O…
• CVE-2013-5895Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX …
• CVE-2013-5896Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, an…
• CVE-2013-5897Unspecified vulnerability in the Oracle Agile Product Lifecy…
• CVE-2013-5898Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 al…
• CVE-2013-5899Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 al…