K16334: Apache Struts vulnerability CVE-2013-4316

🗓️ 21 Feb 2023 19:31:52Reported by f5Type

f5🔗 my.f5.com👁 28 Views

Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default. Known vulnerability CVE-2013-4316 with unknown impact. F5 products affected, detailed in the table

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: Order Management could be subject to an Apache Struts vulnerability that could allow a remote attacker to execute arbitrary code on the system.	12 Apr 202417:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storwize V7000 Unified V1.4.2.1 Includes Fixes for IBM Storwize V7000 Security Vulnerabilities (CVE-2013-4310 CVE-2013-4316)	26 Sep 202204:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Call Center and Apache Struts Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: Intelligent Clusters Security Bulletin, 1410	24 Jan 201912:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Order Management Apache Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:45	–	ibm
IBM Security Bulletins	Security Bulletin:Sterling Web Channel is affected by Apache Struts 2 security vulnerabilities (CVE-2013-4310, CVE-2013-4316, CVE-2013-2251, CVE-2013-2248, CVE-2013-2135, CVE-2013-2134, CVE-2013-2115, CVE-2013-1966, CVE-2013-1965)	16 Jun 201819:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SAN Volume Controller and Storwize Family security vulnerabilities (CVE-2013-4310 CVE-2013-4316)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Order Management and IBM Sterling Configure, Price, Quote are affected by multiple Apache Struts 2 security vulnerabilities.	16 Jun 201819:34	–	ibm
Circl	CVE-2013-4316	18 Dec 202315:01	–	circl
CVE	CVE-2013-4316	30 Sep 201321:00	–	cve

21 Feb 2023 19:31Current

4.6Medium risk

Vulners AI Score4.6

CVSS 210

EPSS0.06168