Lucene search
F5SOL14933HistoryJan 20, 2014 - 12:00 a.m.
SOL14933 - Apache Struts vulnerability CVE-2013-2251
2014-01-2000:00:00
support.f5.com
382
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Recommended action
None
Supplemental Information
- SOL9970: Subscribing to email notifications regarding F5 products
- SOL9957: Creating a custom RSS feed to view new and updated documents
- SOL4602: Overview of the F5 security vulnerability response policy
- SOL15260: Apache Struts vulnerability CVE-2014-0094
- SOL15261: Apache Struts vulnerability CVE-2014-0112
- SOL15262: Apache Struts vulnerability CVE-2014-0113
References
support.f5.com/kb/en-us/solutions/public/15000/200/sol15260.html
support.f5.com/kb/en-us/solutions/public/15000/200/sol15261.html
support.f5.com/kb/en-us/solutions/public/15000/200/sol15262.html
support.f5.com/kb/en-us/solutions/public/4000/600/sol4602.html
support.f5.com/kb/en-us/solutions/public/9000/900/sol9957.html
support.f5.com/kb/en-us/solutions/public/9000/900/sol9970.html
Related
f5
f5
SOL15261 - Apache Struts vulnerability CVE-2014-0112
2014-05-15 00:00:00
SOL15262 - Apache Struts vulnerability CVE-2014-0113
2014-05-15 00:00:00
SOL15260 - Apache Struts vulnerability CVE-2014-0094
2014-05-15 00:00:00
checkpoint_advisories
checkpoint_advisories
ibm
ibm
Security Bulletin: IBM Sterling Order Management, IBM Sterling Configure, Price, Quote and Sterling Web Channel are affected by Apache Struts 2 security vulnerabilities
2020-02-11 21:39:06
ubuntucve
ubuntucve
openvas
openvas
Apache Struts ClassLoader Manipulation Vulnerabilities (S2-021) - Linux
2019-08-28 00:00:00
Apache Archiva Multiple Remote Command Execution Vulnerabilities
2014-01-15 00:00:00
Apache Struts Security Update (S2-020) - Active Check
2014-05-14 00:00:00
nessus
nessus
Apache Struts 2.x < 2.3.20 Multiple ClassLoader Manipulation Vulnerabilities (S2-021)
2018-09-12 00:00:00
Apache Struts 2 ClassLoader Manipulation Incomplete Fix for Security Bypass
2014-04-29 00:00:00
MySQL Enterprise Monitor < 2.3.17 Multiple Vulnerabilities
2015-05-08 00:00:00
veracode
veracode
Class Loader Manipulation With CookieInterceptor
2014-06-06 18:13:23
osv
osv
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:15
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:16
Code injection in Apache Struts
2022-05-13 01:14:26
github
github
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:15
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:16
Code injection in Apache Struts
2022-05-13 01:14:26
jvn
jvn
JVN#19294237: Apache Struts vulnerable to ClassLoader manipulation
2014-04-25 00:00:00
JVN#33504150: Apache Struts vulnerable to remote command execution
2013-09-06 00:00:00
prion
prion
Design/Logic Flaw
2014-04-29 10:37:00
Design/Logic Flaw
2014-04-29 10:37:00
Code injection
2013-07-20 03:37:00
cve
cve
zdt
zdt
Apache Struts ClassLoader Manipulation Remote Code Execution Exploit
2014-05-03 00:00:00
Apache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution Exploit
2017-03-23 00:00:00
Apache Struts 2 DefaultActionMapper Prefixes OGNL Code Execution
2013-07-26 00:00:00
packetstorm
packetstorm
Apache Struts ClassLoader Manipulation Remote Code Execution
2014-05-02 00:00:00
Apache Struts 2 DefaultActionMapper Prefixes OGNL Code Execution
2013-07-25 00:00:00
Apache Struts 2 Remote Code Execution
2020-10-20 00:00:00
securityvulns
securityvulns
[ANN][SECURITY] ClassLoader manipulation issue confirmed for Struts 1 - CVE-2014-0114
2014-05-02 00:00:00
Apache Struts multiple security vulnerabilities
2014-05-07 00:00:00
threatpost
threatpost
VMware Patches Apache Struts Flaws in vCOPS
2014-06-25 13:59:49
vmware
vmware
seebug
seebug
Apache Struts2 多个前缀参数远程命令执行漏洞(CVE-2013-2251)
2013-07-17 00:00:00
Apache Struts ClassLoader操作漏洞
2014-03-10 00:00:00
attackerkb
attackerkb
CVE-2013-2251
2013-07-20 00:00:00
saint
saint
Apache Struts DefaultActionMapper redirect Prefix Vulnerability
2013-08-01 00:00:00
Apache Struts DefaultActionMapper redirect Prefix Vulnerability
2013-08-01 00:00:00
Apache Struts DefaultActionMapper redirect Prefix Vulnerability
2013-08-01 00:00:00
dsquare
dsquare
Apache-Struts DefaultActionMapper < 2.3.15.1 RCE Linux
2013-10-20 00:00:00
canvas
canvas
Immunity Canvas: STRUTS2_DEFAULT_ACTION_MAPPER
2013-07-20 03:37:00
nuclei
nuclei
Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution
2020-10-13 22:06:01
cisa_kev
cisa_kev
Apache Struts Improper Input Validation Vulnerability
2022-03-25 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_STRUTS4
2013-07-20 03:37:00
exploitdb
exploitdb
Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution
2020-10-20 00:00:00
Apache Struts2 2.0.0 < 2.3.15 - Prefixed Parameters OGNL Injection
2014-01-14 00:00:00
cisco
cisco
Apache Struts 2 Command Execution Vulnerability in Multiple Cisco Products
2013-10-23 16:00:00
cert
cert
hackerone
hackerone
U.S. Dept Of Defense: Remote code execution vulnerability on a DoD website
2016-12-19 23:00:16
exploitpack
exploitpack
Apache Struts2 2.0.0 2.3.15 - Prefixed Parameters OGNL Injection
2014-01-14 00:00:00
kitploit
kitploit
Apache Struts v3 - Tool To Exploit 3 RCE Vulnerabilities On ApacheStruts
2018-08-26 21:14:00
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00
huawei
huawei
Security Advisory-Apache Struts2 vulnerability on Huawei multiple products
2014-07-07 00:00:00
Security Advisory-Multiple Apache Struts2 Vulnerabilities in Huawei Products
2013-07-30 00:00:00
redhat
redhat
(RHSA-2019:0910) Important: Red Hat Fuse 7.3 security update
2019-04-30 15:17:04
rapid7blog
rapid7blog
Spring4Shell: Zero-Day Vulnerability in Spring Framework (CVE-2022-22965)
2022-03-30 22:33:54
wallarmlab
wallarmlab
New Struts2 Remote Code Execution exploit caught in the wild
2017-03-09 00:15:54
oracle
oracle
Oracle Critical Patch Update - April 2015
2015-04-14 00:00:00
Oracle Critical Patch Update - October 2013
2013-10-15 00:00:00
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Related for SOL14933