CVE Database›Document archive›CVE-2013-5896

CVE-2013-5896

OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)

Loading…

Severity

Moderate

Red Hat Product Security

4.3

CVSS 2.0

Review impact separately from score.

Published · January 14, 2014

Updated · June 28, 2026

Description

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Applications running with a security manager that make direct use of classes in these JDK internal packages, need to adjust their security policy to grant access. See Java Security Policy Files documentation.

CVSS / CWE

CVSS 2.0 · 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE not specified