VDB

BDU%3A2018-01429

BDU%3A2018-01429 PUBLISHED CVSS 10 CRITICAL

Уязвимость класса DiskFileItem библиотеки Apache Commons FileUpload, позволяющая нарушителю выполнить произвольный код или осуществить манипулирование файлами в целевой системе

Risk Scores

CVSS 2.0
10

Affected Products

VendorProductVersions
Apache Software Foundation, Cisco Systems Inc., Oracle Corp.Struts, Commons FileUpload, Cisco SocialMiner, WebEx Meetings Server, Cisco Webex Management, Cisco Identity Services Engine, Cisco Secure Access Control System, Prime Collaboration Provisioning, Prime Infrastructure, Cisco Prime License Manager, Cisco Prime Network Registrar IP Address Manager, Cisco Prime Network, Cisco Prime Service Catalog, Cisco IOx Fog Director, IoT Field Network Director, Cisco Emergency Responder, Enterprise Chat and Email, Cisco Finesse, Cisco Hosted Collaboration Mediation Fulfillment, Cisco Hosted Collaboration Solution for Contact Center, Cisco MediaSense, Unified Communications Manager IM and Presence Service, Cisco Unified Communications Manager, Cisco Unified Contact Center Enterprise, Cisco Unified Contact Center Express, Cisco Unified E-Mail Interaction Manager, Unified Intelligence Center, Cisco Unified Intelligent Contact Management Enterprise, Cisco Unified Web Interaction Manager, Unity Connection, Cisco Virtualized Voice Browser, Cisco Video Distribution Suite for Internet Streaming, Cisco Mobility Services Engine, Cisco Universal Small Cell RAN Management System, Cisco Prime Network Change and Configuration Management, Cisco Smart Connected Spaces, Cisco Smart Net Total Care, Cisco Webex Centers, Cisco Webex Meetings, Cisco IOS, Enterprise Manager Base Platform, Enterprise Data Quality

Timeline

  • Dec 13, 2018 CVE Published
  • Mar 23, 2021 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›