VDB
BDU%3A2015-00402
BDU%3A2015-00402
PUBLISHED
CVSS 7.5 HIGH
Уязвимость реализации метода getClass программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
7.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apache Software Foundation, Oracle Corp., Red Hat, Inc., IBM Corp., Broadcom Inc. | Struts, WebCenter Sites, Red Hat JBoss Fuse, IBM Sterling Order Management, IBM Sterling Selling and Fulfillment Foundation, IBM Sterling Field Sales, IBM Sterling Web Channel, VMware Aria Operations, VMware Aria Automation Orchestrator, MySQL Enterprise Monitor | |
| Apache Software Foundation, Oracle Corp., Red Hat Inc., IBM Corp., VMware Inc. | Struts, WebCenter Sites, Red Hat JBoss Fuse, IBM Sterling Order Management, IBM Sterling Selling and Fulfillment Foundation, IBM Sterling Field Sales, IBM Sterling Web Channel, VMware vCenter Operations Management Suite, VMware vCenter Orchestrator, MySQL Enterprise Monitor |
Timeline
- Jul 6, 2016 CVE Published
- Sep 19, 2022 CVE Updated
References
- https://access.redhat.com/security/cve/cve-2014-0112 advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21676706 advisory
- https://www.vmware.com/security/advisories/VMSA-2014-0007.html advisory
- https://www.oracle.com/security-alerts/cpuapr2015.html advisory
- http://jvn.jp/en/jp/JVN19294237/index.html url
- http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045 url
- http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html url
- https://nvd.nist.gov/vuln/detail/CVE-2014-0112 url
- https://cwiki.apache.org/confluence/display/WW/S2-021 advisory