VDB
BDU%3A2022-05999
BDU%3A2022-05999
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Уязвимость реализации механизма сопоставления действий DefaultActionMapper программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
9.300000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| Oracle Corp., IBM Corp., Cisco Systems Inc., Apache Software Foundation, Fujitsu Limited | WebCenter Sites, Oracle FLEXCUBE Private Banking, MySQL Enterprise Monitor, IBM Call Center for Commerce, Cisco Identity Services Engine, Cisco Unified Contact Center Enterprise, Cisco Media Experience Engine (MXE) 3500 Series, Struts, Interstage Business Process Manager Analytics, Siebel Apps - E-Billing, Cisco Unified SIP Proxy Software, Cisco Packaged Contact Center Enterprise |
Timeline
- Jul 27, 2013 PoC Published
- Jan 14, 2014 PoC Published
- Aug 20, 2015 PoC Published
- May 29, 2018 PoC Published
- Oct 15, 2020 PoC Published
- Oct 16, 2020 PoC Published
- Sep 30, 2022 CVE Published
- Jun 14, 2023 PoC Published
- Sep 24, 2024 CVE Updated
- Dec 24, 2024 PoC Published
- Feb 6, 2025 PoC Published
- Feb 23, 2025 PoC Published
References
- https://www.oracle.com/security-alerts/cpujan2014.html url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90392 url
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2 advisory
- https://www.fujitsu.com/global/support/products/software/security/products-f/interstage-bpm-analytics-201301e.html url
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below/ advisory
- https://seclists.org/fulldisclosure/2013/Oct/96 url
- https://www.oracle.com/security-alerts/cpujul2015.html url
- https://nvd.nist.gov/vuln/detail/CVE-2013-2251 url
- https://cwiki.apache.org/confluence/display/WW/S2-016 url
- http://www.fujitsu.com/global/support/software/security/products-f/interstage-bpm-analytics-201301e.html url
- 20131013 Apache Software Foundation A Subsite Remote command execution mailing-list
- http://cxsecurity.com/issue/WLB-2014010087 url
- http://archiva.apache.org/security.html url
- 98445 vdb
- 1032916 vdb
- 61189 vdb
- [oss-security] 20140114 Re: CVE Request: Apache Archiva Remote Command Execution 0day mailing-list
- http://packetstormsecurity.com/files/159629/Apache-Struts-2-Remote-Code-Execution.html url
- http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html url
…and 5 more