CVE-2013-2423

Oracle JRE's hotspot component contained an unspecified vulnerability allowing remote attackers to affect integrity, which was actively exploited in the wild.

The Oracle Java Runtime Environment (JRE) hotspot component had an unspecified vulnerability that allowed remote attackers to affect system integrity. This failure matters to DIB organizations because the JRE has a documented history of critical remote code execution vulnerabilities that have enabled ransomware outbreaks and arbitrary command execution. Organizations must ensure their Java runtimes are patched and monitored for KEV-listed vulnerabilities to prevent similar integrity compromises.

Shame score — The vulnerability was actively exploited in the wild and the JRE has a history of critical remote code execution flaws that have enabled ransomware outbreaks, indicating systemic issues in runtime security controls.