VDB
BDU%3A2015-00402
BDU%3A2015-00402
PUBLISHED
CVSS 7.5 HIGH
Уязвимость реализации метода getClass программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation, Oracle Corp., Red Hat Inc., IBM Corp., VMware Inc. | Struts, WebCenter Sites, Red Hat JBoss Fuse, IBM Sterling Order Management, IBM Sterling Selling and Fulfillment Foundation, IBM Sterling Field Sales, IBM Sterling Web Channel, VMware vCenter Operations Management Suite, VMware vCenter Orchestrator, MySQL Enterprise Monitor |
Timeline
- Jul 6, 2016 CVE Published
- Sep 19, 2022 CVE Updated
References
- https://access.redhat.com/security/cve/cve-2014-0112 url
- http://www-01.ibm.com/support/docview.wss?uid=swg21676706 url
- https://www.vmware.com/security/advisories/VMSA-2014-0007.html url
- https://www.oracle.com/security-alerts/cpuapr2015.html url
- http://jvn.jp/en/jp/JVN19294237/index.html url
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045 url
- http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html url
- https://nvd.nist.gov/vuln/detail/CVE-2014-0112 url
- https://cwiki.apache.org/confluence/display/WW/S2-021 advisory