Some versions of Apache Struts2 software used in Huawei devices have security vulnerabilities. A patch released for the software to fix vulnerabilities CVE-2014-0050 and CVE-2014-0094 has the risk of being bypassed. (Vulnerability ID: HWPSIRT-2014-0420)

This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-0116.

CPENameOperatorVersion
anyofficeeqV200R002C10SPC500
espace meeting portaleqV100R001C00
eudemon8000e-x3eqV200R001C00
x8eqV200R001C00
x16
            usg9520eqV200R001C00
usg9560eqV200R001C00
usg9580eqV200R001C00
eudemon8000e-x3eq8030/
eudemon8000e-x3eq8060/
eudemon8000e-x3eq8080

Name	Operator	Version
anyoffice	eq	V200R002C10SPC500
espace meeting portal	eq	V100R001C00
eudemon8000e-x3	eq	V200R001C00
x8	eq	V200R001C00
x16 usg9520	eq	V200R001C00
usg9560	eq	V200R001C00
usg9580	eq	V200R001C00
eudemon8000e-x3	eq	8030/
eudemon8000e-x3	eq	8060/
eudemon8000e-x3	eq	8080

Rows per page:

1-10 of 371

openvas 32

nessus 38

threatpost 1

ibm 36

vmware 3

cert 1

osv 5

hackerone 1

prion 5

github 5

ubuntucve 5

atlassian 3

seebug 3

securityvulns 7

debian 2

veracode 2

debiancve 1

f5 7

cve 5

jvn 2

mageia 2

checkpoint_advisories 2

fedora 2

zdt 3

tomcat 2

exploitpack 1

redhat 10

suse 1

amazon 2

exploitdb 1

packetstorm 1

gentoo 1

oraclelinux 3

ubuntu 1

centos 2

rapid7blog 1

openvas

Apache Struts 2.x < 2.3.16.1 Multiple Vulnerabilities (S2-020) - Linux

2019-08-28 00:00:00

Apache Struts Security Update (S2-020) - Version Check

2019-08-28 00:00:00

Mageia: Security Advisory (MGASA-2014-0109)

2022-01-28 00:00:00

nessus

Apache Struts 2.0.0 < 2.3.16.1 Multiple Vulnerabilities (credentialed check) (Deprecated)

2015-01-30 00:00:00

MySQL Enterprise Monitor < 2.3.17 Multiple Vulnerabilities

2015-05-08 00:00:00

MySQL Enterprise Monitor 3.0.x < 3.0.11 Multiple Vulnerabilities

2015-05-08 00:00:00

threatpost

VMware Patches Apache Struts Flaws in vCOPS

2014-06-25 13:59:49

ibm

Security Bulletin: The IBM FlashSystem V840 product model numbers AC0 and AC1 nodes are affected by vulnerabilities in Apache’s Struts library

2018-06-18 00:08:33

Security Bulletin: The IBM FlashSystem 840 and V840 product model number AE1 nodes are affected by vulnerabilities in Apache’s Struts library

2023-02-18 01:45:50

Security Bulletin: The IBM V840 product model number AE1 node is affected by vulnerabilities in Apache’s Struts library

2018-06-18 00:08:27

vmware

VMware product updates address security vulnerabilities in Apache Struts library

2014-06-24 00:00:00

VMware product updates address security vulnerabilities in Apache Struts library

2014-06-24 00:00:00

VMware vSphere product updates to third party libraries

2014-09-09 00:00:00

cert

Apache Struts2 ClassLoader allows access to class properties via request parameters

2014-04-25 00:00:00

osv

ClassLoader manipulation in Apache Struts

2022-05-14 00:54:15

Commons FileUpload Denial of service vulnerability

2018-12-21 17:51:42

ClassLoader manipulation in Apache Struts

2022-05-14 00:54:16

hackerone

U.S. Dept Of Defense: Remote code execution vulnerability on a DoD website

2016-12-19 23:00:16

prion

Security feature bypass

2014-03-11 13:00:00

Design/Logic Flaw

2014-04-01 06:27:00

Design/Logic Flaw

2014-04-29 10:37:00

github

ClassLoader manipulation in Apache Struts

2022-05-14 00:54:15

Commons FileUpload Denial of service vulnerability

2018-12-21 17:51:42

ClassLoader manipulation in Apache Struts

2022-05-14 00:54:16

ubuntucve

CVE-2014-0094

2014-03-11 00:00:00

CVE-2014-0050

2014-02-07 00:00:00

CVE-2014-0116

2014-05-08 00:00:00

atlassian

Security vulnerability in apache commons fileupload

2014-02-10 05:56:15

Security vulnerability in apache commons fileupload

2014-02-10 05:56:15

Security vulnerability in apache commons fileupload

2014-02-10 05:56:15

seebug

Apache Commons FileUpload/Apache Tomcat拒绝服务漏洞

2014-02-13 00:00:00

Apache Struts ClassLoader操作漏洞

2014-03-10 00:00:00

Apache Commons FileUpload and Apache Tomcat - Denial-of-Service

2014-07-01 00:00:00

securityvulns

[SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS

2014-03-31 00:00:00

[security bulletin] HPSBGN03329 rev.1 - HP SDN VAN Controller, Remote Denial of Service (DoS), Distributed Denial of Service (DDoS)

2015-05-11 00:00:00

HP SDN VAN Controller DoS

2015-05-11 00:00:00

debian

[SECURITY] [DSA 2856-1] libcommons-fileupload-java security update

2014-02-07 22:59:08

[SECURITY] [DSA 2897-1] tomcat7 security update

2014-04-08 18:25:14

veracode

Denial Of Service (DoS) By An Infinite Loop Causing CPU Consumption

2019-01-15 08:58:15

Class Loader Manipulation With CookieInterceptor

2014-06-06 18:13:23

debiancve

CVE-2014-0050

2014-04-01 06:27:00

K15260 : Apache Struts vulnerability CVE-2014-0094

2014-05-15 00:00:00

K15189 : Apache Commons FileUpload vulnerability CVE-2014-0050

2015-08-15 00:00:00

SOL15189 - Apache Commons FileUpload vulnerability CVE-2014-0050

2014-04-18 00:00:00

cve

CVE-2014-0094

2014-03-11 13:00:00

CVE-2014-0050

2014-04-01 06:27:00

CVE-2014-0116

2014-05-08 10:55:00

jvn

JVN#14876762: Apache Commons FileUpload vulnerable to denial-of-service (DoS)

2014-02-10 00:00:00

JVN#19294237: Apache Struts vulnerable to ClassLoader manipulation

2014-04-25 00:00:00

mageia

Updated tomcat packages fix CVE-2014-0050

2014-02-28 22:59:29

Updated apache-commons-fileupload package fixes CVE-2014-0050

2014-02-28 22:57:52

checkpoint_advisories

Apache Tomcat FileUpload Content-Type Header Infinite Loop (CVE-2014-0050)

2014-03-16 00:00:00

Apache Struts ParametersInterceptor ClassLoader Security Bypass (CVE-2014-0094; CVE-2014-0112; CVE-2014-0113; CVE-2014-0114)

2014-04-25 00:00:00

fedora

[SECURITY] Fedora 20 Update: apache-commons-fileupload-1.3-5.fc20

2014-02-17 21:06:10

[SECURITY] Fedora 19 Update: apache-commons-fileupload-1.3-5.fc19

2014-02-17 21:07:04

zdt

Apache Commons FileUpload and Apache Tomcat Denial of Service

2014-02-12 00:00:00

Apache Struts ClassLoader Manipulation Remote Code Execution Exploit

2014-05-03 00:00:00

Apache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution Exploit

2017-03-23 00:00:00

tomcat

Fixed in Apache Tomcat 8.0.3

2014-02-11 00:00:00

Fixed in Apache Tomcat 7.0.52

2014-02-17 00:00:00

exploitpack

Apache Commons FileUpload and Apache Tomcat - Denial of Service

2014-02-12 00:00:00

redhat

(RHSA-2014:0253) Moderate: Red Hat JBoss Enterprise Application Platform 6.2.1 security update

2014-03-05 00:00:00

(RHSA-2014:0252) Moderate: Red Hat JBoss Enterprise Application Platform 6.2.1 security update

2014-03-05 18:50:05

(RHSA-2014:0429) Moderate: tomcat6 security update

2014-04-23 00:00:00

suse

Security update for jakarta-commons-fileupload (important)

2014-04-17 21:04:15

amazon

Medium: tomcat7

2014-03-24 23:36:00

Medium: tomcat6

2014-05-21 10:45:00

exploitdb

Apache Commons FileUpload and Apache Tomcat - Denial of Service

2014-02-12 00:00:00

packetstorm

Apache Struts ClassLoader Manipulation Remote Code Execution

2014-05-02 00:00:00

gentoo

Apache Commons FileUpload: Multiple vulnerabilities

2021-07-17 00:00:00

oraclelinux

tomcat6 security update

2014-04-23 00:00:00

tomcat security update

2014-07-20 00:00:00

tomcat6 security and bug fix update

2014-07-09 00:00:00

ubuntu

Tomcat vulnerabilities

2014-03-06 00:00:00

centos

tomcat6 security update

2014-04-23 19:07:14

tomcat6 security update

2014-07-09 16:09:49

rapid7blog

Spring4Shell: Zero-Day Vulnerability in Spring Framework (CVE-2022-22965)

2022-03-30 22:33:54

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.971 High

EPSS

Percentile

99.8%

JSON

Related for HUAWEI-SA-20140707-01-STRUTS2