Apache Struts 远程代码执行漏洞(CVE-2013-4316)

🗓️ 26 Sep 2013 00:00:00Reported by RootType

seebug

seebug🔗 www.seebug.org👁 175 Views

Apache Struts 2.3.15.2 "Dynamic Method Invocation" Remote Code Execution(CVE-2013-4316

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: Order Management could be subject to an Apache Struts vulnerability that could allow a remote attacker to execute arbitrary code on the system.	12 Apr 202417:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storwize V7000 Unified V1.4.2.1 Includes Fixes for IBM Storwize V7000 Security Vulnerabilities (CVE-2013-4310 CVE-2013-4316)	26 Sep 202204:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Call Center and Apache Struts Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: Intelligent Clusters Security Bulletin, 1410	24 Jan 201912:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Order Management Apache Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:45	–	ibm
IBM Security Bulletins	Security Bulletin:Sterling Web Channel is affected by Apache Struts 2 security vulnerabilities (CVE-2013-4310, CVE-2013-4316, CVE-2013-2251, CVE-2013-2248, CVE-2013-2135, CVE-2013-2134, CVE-2013-2115, CVE-2013-1966, CVE-2013-1965)	16 Jun 201819:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SAN Volume Controller and Storwize Family security vulnerabilities (CVE-2013-4310 CVE-2013-4316)	29 Mar 202301:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Order Management and IBM Sterling Configure, Price, Quote are affected by multiple Apache Struts 2 security vulnerabilities.	16 Jun 201819:34	–	ibm
Circl	CVE-2013-4316	18 Dec 202315:01	–	circl
CVE	CVE-2013-4316	30 Sep 201321:00	–	cve

26 Sep 2013 00:00Current

8.4High risk

Vulners AI Score8.4

EPSS0.06168

apache struts remote code execution dynamic method invocation cve-2013-4316 security advisory patch installation