Known vulnerabilities in Oracle Java SE 5 Update 40

Vendor: Oracle
Version: 5 Update 40
Software CPE: cpe:2.3:a:oracle:java_se:*:*:*:*:*:*:*:*
Total vulnerabilities: 4
Public exploits: 4
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Java SE version 5 Update 40 Oracle Java SE 5 Update 40 is affected by 4 vulnerabilities: 3 critical, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU6171 - Improper Access Control
CVE-2013-2423
CWE-284 Low
Public exploit available
Exploited
- 24.03.2017 SB2013041601
#VU4648 - Improper Validation of Array Index
CVE-2013-2465
CWE-129 Critical
Public exploit available
Exploited
- 16.01.2017 SB2013061801
#VU4554 - Resource Management Errors
CVE-2013-0422
CWE-399 Critical
Public exploit available
Exploited
- 13.01.2017 SB2013011001
#VU4439 - Memory corruption
CVE-2013-1493
CWE-119 Critical
Public exploit available
Exploited
- 13.01.2017 SB2013030101