CVE-2013-0422Used in ransomware
OR
Oracle Java Runtime Environment (JRE)
Oracle JRE Remote Code Execution Vulnerability
What it is
A vulnerability in the way Java restricts the permissions of Java applets could allow an attacker to execute commands on a vulnerable system.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Oracle entries on the list
- HTTP Server and Oracle Weblogic Server Proxy Plug-in Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability CVE-2026-21962 · Aug 24, 2026
- E-Business Suite Oracle E-Business Suite Improper Privilege Management Vulnerability CVE-2026-46817 · Jul 15, 2026
- PeopleSoft Enterprise PeopleTools Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability CVE-2026-35273 · Jun 12, 2026
- WebLogic Server Oracle WebLogic Server Unspecified Vulnerability CVE-2024-21182 · Jun 1, 2026
- Fusion Middleware Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability CVE-2025-61757 · Nov 21, 2025
- E-Business Suite Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability CVE-2025-61884 · Oct 20, 2025