VDB
BDU%3A2022-06073
BDU%3A2022-06073
PUBLISHED
CVSS 10 CRITICAL
Уязвимость реализации механизма Dynamic Method Invocation (DMI) программной платформы Apache Struts, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corp., IBM Corp., Apache Software Foundation | WebCenter Sites, Oracle FLEXCUBE Private Banking, MySQL Enterprise Monitor, IBM Call Center for Commerce, Struts |
Timeline
- Oct 4, 2022 CVE Published
References
- https://cwiki.apache.org/confluence/display/WW/S2-019 url
- https://nvd.nist.gov/vuln/detail/CVE-2013-4316 url
- https://www.ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below/ advisory
- https://www.oracle.com/security-alerts/cpujan2014.html advisory