AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2013-5960

MEDIUM · CVSS 5.8 EPSS 1.65% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2013-09-30 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2013-5960
Severity
MEDIUM
CVSS
5.8
EPSS
1.65%
Java

Original Filing — NVD Description

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic protection mechanisms via an attack against the intended cipher mode in a non-default configuration, a different vulnerability than CVE-2013-5679.