WebSphere Application Server is shipped as a component of WebSphere Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

For vulnerability details, see the Classloader Manipulation Vulnerability in IBM WebSphere Application Server CVE-2014-0114 document for IBM WebSphere Application Server.

Affected Products and Versions

The following products are affected:

WebSphere Business Monitor 7.0.x

CPENameOperatorVersion
websphere business monitoreq7.0.0.5
websphere business monitoreq7.0.0.4
websphere business monitoreq7.0.0.3
websphere business monitoreq7.0.0.2
websphere business monitoreq7.0

Name	Operator	Version
websphere business monitor	eq	7.0.0.5
websphere business monitor	eq	7.0.0.4
websphere business monitor	eq	7.0.0.3
websphere business monitor	eq	7.0.0.2
websphere business monitor	eq	7.0

ibm 93

nessus 24

fedora 1

packetstorm 1

suse 1

redhat 7

openvas 11

mageia 1

securityvulns 8

ubuntucve 1

debian 2

prion 4

oraclelinux 2

cve 4

checkpoint_advisories 2

osv 4

centos 1

jvn 2

f5 2

gentoo 1

debiancve 1

github 1

ubuntu 1

redhatcve 1

zdt 1

vmware 2

atlassian 2

ics 1

hp 1

oracle 12

ibm

Security Bulletin: ClassLoader manipulation with Apache Struts in Rational Application Developer affecting Rational Business Developer (CVE-2014-0114)

2018-08-03 04:23:43

Security Bulletin: ClassLoader manipulation with Apache Struts affecting IBM Tivoli Identity Manager/IBM Security Identity Manager (CVE-2014-0114)

2018-06-16 21:18:03

Security Bulletin: Rational Insight - Apache Struts used by WebSphere Application Server 6.1 and 7 (CVE-2014-0114)

2018-06-17 04:54:29

nessus

GLSA-201607-09 : Commons-BeanUtils: Arbitrary code execution

2016-07-21 00:00:00

Debian DLA-57-1 : libstruts1.2-java security update

2015-03-26 00:00:00

RHEL 5 : struts (RHSA-2014:0474)

2014-05-07 00:00:00

fedora

[SECURITY] Fedora 20 Update: struts-1.3.10-10.fc20

2014-08-23 02:00:36

packetstorm

OSCAR EMR 15.21beta361 XSS / Disclosure / CSRF / Insecure Direct Object Reference

2018-08-23 00:00:00

suse

Security update for struts (important)

2014-07-16 01:10:20

redhat

(RHSA-2014:0498) Important: Fuse ESB Enterprise 7.1.0 security update

2014-05-14 00:00:00

(RHSA-2014:0500) Important: struts security update

2014-05-14 00:00:00

(RHSA-2014:0474) Important: struts security update

2014-05-07 00:00:00

openvas

Oracle Linux Local Check: ELSA-2014-0474

2015-10-06 00:00:00

RedHat Update for struts RHSA-2014:0474-01

2014-05-12 00:00:00

Debian Security Advisory DSA 2940-1 (libstruts1.2-java - security update)

2014-08-21 00:00:00

mageia

Updated struts packages fix CVE-2014-0114

2014-05-15 02:13:20

securityvulns

Apache commons-beanutils code exeuction

2014-06-17 00:00:00

[oss-security] CVE request for commons-beanutils: 'class' property is exposed, potentially leading to RCE

2014-06-17 00:00:00

[ANN][SECURITY] Struts 1 - CVE-2014-0114 -Mitigation Advice Available, Possible RCE Impact

2014-05-02 00:00:00

ubuntucve

CVE-2014-0114

2014-04-30 00:00:00

debian

[SECURITY] [DSA 2940-1] libstruts1.2-java security update

2014-08-21 06:39:48

[SECURITY] [DLA 57-1] libstruts1.2-java security update

2014-09-17 12:59:07

prion

Code injection

2014-04-30 10:49:00

Input validation

2019-10-03 14:15:00

Design/Logic Flaw

2020-02-05 19:15:00

oraclelinux

struts security update

2014-05-06 00:00:00

apache-commons-beanutils security update

2020-01-22 00:00:00

cve

CVE-2014-0114

2014-04-30 10:49:00

CVE-2014-3540

2014-07-08 04:11:00

CVE-2019-3834

2019-10-03 14:15:00

checkpoint_advisories

Apache Struts ActionForm ClassLoader Security Bypass (CVE-2014-0114)

2014-05-18 00:00:00

Apache Struts ParametersInterceptor ClassLoader Security Bypass (CVE-2014-0094; CVE-2014-0112; CVE-2014-0113; CVE-2014-0114)

2014-04-25 00:00:00

osv

Arbitrary code execution in Apache Commons BeanUtils

2020-06-10 23:38:01

libstruts1.2-java - security update

2014-09-17 00:00:00

libstruts1.2-java - security update

2014-08-21 00:00:00

centos

struts security update

2014-05-07 14:04:43

jvn

JVN#30962312: TERASOLUNA Server Framework for Java(Web) vulnerable to ClassLoader manipulation

2014-06-17 00:00:00

JVN#19118282: Seasar S2Struts vulnerable to ClassLoader manipulation

2014-07-15 00:00:00

K15282 : Apache Struts vulnerability CVE-2014-0114

2014-10-20 00:00:00

SOL15282 - Apache Struts vulnerability CVE-2014-0114

2014-05-19 00:00:00

gentoo

Commons-BeanUtils: Arbitrary code execution

2016-07-20 00:00:00

debiancve

CVE-2014-0114

2014-04-30 10:49:00

github

Arbitrary code execution in Apache Commons BeanUtils

2020-06-10 23:38:01

ubuntu

Apache Commons BeanUtils vulnerabilities

2021-03-15 00:00:00

redhatcve

CVE-2019-3834

2019-10-02 20:20:56

zdt

Apache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution Exploit

2017-03-23 00:00:00

vmware

VMware vSphere product updates to third party libraries

2014-09-09 00:00:00

VMware vSphere product updates to third party libraries

2014-09-09 00:00:00

atlassian

Update atlassian-gadgets to 4.2.39 to fix CVE-2012-0881, CVE-2014-0114 and other vulnerabilities

2021-02-03 22:43:13

Update atlassian-gadgets to 4.2.39 to fix CVE-2012-0881, CVE-2014-0114 and other vulnerabilities

2021-02-03 22:43:13

ics

OpenClinic GA (Update B)

2021-06-15 12:00:00

HP Device Manager Security Updates

2023-10-20 00:00:00

oracle

Oracle Critical Patch Update - July 2014

2014-07-15 00:00:00

Oracle Critical Patch Update - October 2014

2014-10-14 00:00:00

Oracle Critical Patch Update Advisory - January 2015

2015-03-10 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

Related for A10E7A45BAB7A017FB419F00D57064F9A2482F36ECDBC49D11E209F1CC8D8A4C