Lucene search
Japan Vulnerability NotesJVN:33504150HistorySep 06, 2013 - 12:00 a.m.
JVN#33504150: Apache Struts vulnerable to remote command execution
2013-09-0600:00:00
Japan Vulnerability Notes
jvn.jp
34
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Apache Struts provided by the Apache Software Foundation is a software framework for creating Java web applications. Apache Struts contains a remote command execution vulnerability.
This issue is the same issue that the developer published as S2-016 on July 16, 2013
Note that attacks leveraging this vulnerability have been confirmed.
Impact
An arbitrary command may be executed on the server where Apache Struts resides.
Solution
Apply an Update
Update to the latest version according to the information provided by the developer.
Products Affected
- Apache Struts 2.0.0 through 2.3.15
Related
seebug
seebug
Apache Struts2 ε€δΈͺεηΌεζ°θΏη¨ε½δ»€ζ§θ‘ζΌζ΄(CVE-2013-2251)
2013-07-17 00:00:00
packetstorm
packetstorm
Apache Struts 2 DefaultActionMapper Prefixes OGNL Code Execution
2013-07-25 00:00:00
Apache Struts 2 Remote Code Execution
2020-10-20 00:00:00
Struts2 2.3.15 OGNL Injection
2013-08-13 00:00:00
github
github
Code injection in Apache Struts
2022-05-13 01:14:26
checkpoint_advisories
checkpoint_advisories
Apache Struts Remote Command Execution (CVE-2013-2251)
2013-07-25 00:00:00
Apache Struts Remote Command Execution - Ver2 (CVE-2013-2251)
2015-05-18 00:00:00
nessus
nessus
Selligent Message Studio Struts Code Execution (CVE-2013-2251)
2020-11-05 00:00:00
Apache Struts 2 'action:' Parameter Arbitrary Remote Command Execution
2013-07-19 00:00:00
MySQL Enterprise Monitor < 2.3.14 Apache Struts Multiple Vulnerabilities
2015-05-08 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_STRUTS4
2013-07-20 03:37:00
osv
osv
Code injection in Apache Struts
2022-05-13 01:14:26
openvas
openvas
Apache Archiva Multiple Remote Command Execution Vulnerabilities
2014-01-15 00:00:00
Apache Struts2 Redirection and Security Bypass Vulnerabilities
2013-07-24 00:00:00
Apache Struts2 Redirection and Security Bypass Vulnerabilities
2013-07-24 00:00:00
prion
prion
Code injection
2013-07-20 03:37:00
attackerkb
attackerkb
CVE-2013-2251
2013-07-20 00:00:00
securityvulns
securityvulns
[SECURITY] CVE-2013-2251: Apache Archiva Remote Command Execution
2014-05-04 00:00:00
Struts2 Prefixed Parameters OGNL Injection Vulnerability
2013-09-09 00:00:00
zdt
zdt
Apache Struts 2 DefaultActionMapper Prefixes OGNL Code Execution
2013-07-26 00:00:00
saint
saint
Apache Struts DefaultActionMapper redirect Prefix Vulnerability
2013-08-01 00:00:00
Apache Struts DefaultActionMapper redirect Prefix Vulnerability
2013-08-01 00:00:00
Apache Struts DefaultActionMapper redirect Prefix Vulnerability
2013-08-01 00:00:00
dsquare
dsquare
Apache-Struts DefaultActionMapper < 2.3.15.1 RCE Linux
2013-10-20 00:00:00
canvas
canvas
Immunity Canvas: STRUTS2_DEFAULT_ACTION_MAPPER
2013-07-20 03:37:00
cisa_kev
cisa_kev
Apache Struts Improper Input Validation Vulnerability
2022-03-25 00:00:00
ubuntucve
ubuntucve
CVE-2013-2251
2013-07-20 00:00:00
nuclei
nuclei
Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution
2020-10-13 22:06:01
f5
f5
K14933 : Apache Struts vulnerability CVE-2013-2251
2014-05-16 00:00:00
SOL15262 - Apache Struts vulnerability CVE-2014-0113
2014-05-15 00:00:00
SOL15260 - Apache Struts vulnerability CVE-2014-0094
2014-05-15 00:00:00
exploitdb
exploitdb
Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution
2020-10-20 00:00:00
Apache Struts2 2.0.0 < 2.3.15 - Prefixed Parameters OGNL Injection
2014-01-14 00:00:00
cisco
cisco
Apache Struts 2 Command Execution Vulnerability in Multiple Cisco Products
2013-10-23 16:00:00
cve
cve
CVE-2013-2251
2013-07-20 03:37:00
exploitpack
exploitpack
Apache Struts2 2.0.0 2.3.15 - Prefixed Parameters OGNL Injection
2014-01-14 00:00:00
kitploit
kitploit
Apache Struts v3 - Tool To Exploit 3 RCE Vulnerabilities On ApacheStruts
2018-08-26 21:14:00
Vulmap - Web Vulnerability Scanning And Verification Tools
2020-12-25 11:30:00
huawei
huawei
Security Advisory-Multiple Apache Struts2 Vulnerabilities in Huawei Products
2013-07-30 00:00:00
wallarmlab
wallarmlab
New Struts2 Remote Code Execution exploit caught in the wild
2017-03-09 00:15:54
oracle
oracle
Oracle Critical Patch Update - October 2013
2013-10-15 00:00:00
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00
Oracle Critical Patch Update Advisory - July 2015
2015-07-14 00:00:00
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.974 High
EPSS
Percentile
99.9%
Related for JVN:33504150