Russian Vulnerability Scanner Database

Back to List

BDU:2022-05999

Scores

EPSS Score

0.0000

CVSS

3.x 10.0

Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

All CVSS Scores

CVSS 4.0
0.0
CVSS 3.x
10.0

Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVSS 2.0
9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Уязвимость реализации механизма сопоставления действий DefaultActionMapper программной платформы Apache Struts связана с недостаточной очисткой входных данных при обработке параметров action:, redirect: и redirectAction: prefix. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код

Sources

bdu

Related Vulnerabilities

CVE-2013-2251

Reference Links

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-2251
https://www.ibm.com/blogs/psirt/security-bulletin-ibm-call-center-and-apache-struts-struts-upgrade-strategy-various-cves-see-below/
https://exchange.xforce.ibmcloud.com/vulnerabilities/90392
https://seclists.org/fulldisclosure/2013/Oct/96
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2
https://cwiki.apache.org/confluence/display/WW/S2-016
https://www.fujitsu.com/global/support/products/software/security/products-f/interstage-bpm-analytics-201301e.html
https://www.oracle.com/security-alerts/cpujan2014.html
https://www.oracle.com/security-alerts/cpujul2015.html
https://nvd.nist.gov/vuln/detail/CVE-2013-2251
https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv

Vulnerable Software

Type: Configuration

Vendor: apache software foundation

Product: apache struts

Operating System: * *

Trait: 
{
  "version_end_including": "2.3.15",
  "version_start_including": "2.0.0"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco identity services engine

Operating System: * *

Trait: 
{
  "version_end_excluding": "1.0.4.573-6"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco identity services engine

Operating System: * *

Trait: 
{
  "version_end_excluding": "1.2.0.899",
  "version_start_including": "1.2.0.0"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco identity services engine

Operating System: * *

Trait: 
{
  "version_end_excluding": "1.1.4.218-4",
  "version_start_including": "1.1.4.218"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco identity services engine

Operating System: * *

Trait: 
{
  "version_end_excluding": "1.1.3.124-4",
  "version_start_including": "1.1.3.124"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco identity services engine

Operating System: * *

Trait: 
{
  "version_end_excluding": "1.1.2.145-9",
  "version_start_including": "1.1.2.145"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco identity services engine

Operating System: * *

Trait: 
{
  "version_end_excluding": "1.1.1.268-6",
  "version_start_including": "1.1.1.268"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco identity services engine

Operating System: * *

Trait: 
{
  "version_end_excluding": "1.1.0.665-4",
  "version_start_including": "1.1.0.665"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco media experience engine (mxe) 3500 series

Operating System: * *

Trait: 
{
  "version_end_excluding": "3.3.2"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco packaged contact center enterprise

Operating System: * *

Trait: 
{
  "version_end_excluding": "10.0(1)ES10",
  "version_start_including": "10.0(1)"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco packaged contact center enterprise

Operating System: * *

Trait: 
{
  "version_end_excluding": "9.0(3)ES13",
  "version_start_including": "9.0(3)"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco packaged contact center enterprise

Operating System: * *

Trait: 
{
  "version_end_excluding": "9.0(4)ES39",
  "version_start_including": "9.0(4)"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco packaged contact center enterprise

Operating System: * *

Trait: 
{
  "version_end_excluding": "8.5(4)ES37",
  "version_start_including": "8.5(4)"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco packaged contact center enterprise

Operating System: * *

Trait: 
{
  "version_end_excluding": "10.5(1)",
  "version_start_including": "10.5"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco unified contact center enterprise

Operating System: * *

Trait: 
{
  "version_end_excluding": "8.5(4)ES37",
  "version_start_including": "8.5(4)"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco unified contact center enterprise

Operating System: * *

Trait: 
{
  "version_end_excluding": "9.0(4)ES39",
  "version_start_including": "9.0(4)"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco unified contact center enterprise

Operating System: * *

Trait: 
{
  "version_end_excluding": "9.0(3)ES13",
  "version_start_including": "9.0(3)"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco unified contact center enterprise

Operating System: * *

Trait: 
{
  "version_end_excluding": "10.0(1)ES10",
  "version_start_including": "10.0(1)"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco unified contact center enterprise

Operating System: * *

Trait: 
{
  "version_end_excluding": "10.5(1)",
  "version_start_including": "10.5"
}

Source: bdu

Type: Configuration

Vendor: cisco systems inc.

Product: cisco unified sip proxy software

Operating System: * *

Trait: 
{
  "version_end_excluding": "8.5(5)"
}

Source: bdu

Type: Configuration

Vendor: fujitsu limited

Product: interstage business process manager analytics

Operating System: * *

Trait: 
{
  "version_exact": "12.1"
}

Source: bdu

Type: Configuration

Vendor: fujitsu limited

Product: interstage business process manager analytics

Operating System: * *

Trait: 
{
  "version_exact": "12.0"
}

Source: bdu

Type: Configuration

Vendor: ibm corp.

Product: ibm call center for commerce

Operating System: * *

Trait: 
{
  "version_exact": "9.5.0"
}

Source: bdu

Type: Configuration

Vendor: ibm corp.

Product: ibm call center for commerce

Operating System: * *

Trait: 
{
  "version_exact": "10.0"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: mysql enterprise monitor

Operating System: * *

Trait: 
{
  "version_end_including": "3.0.4",
  "version_start_including": "3.0.0"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: mysql enterprise monitor

Operating System: * *

Trait: 
{
  "version_end_including": "2.3.14"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: oracle flexcube private banking

Operating System: * *

Trait: 
{
  "version_exact": "12.0.2"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: oracle flexcube private banking

Operating System: * *

Trait: 
{
  "version_exact": "2.2.0.1"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: oracle flexcube private banking

Operating System: * *

Trait: 
{
  "version_exact": "12.0.1.0"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: oracle flexcube private banking

Operating System: * *

Trait: 
{
  "version_exact": "1.7"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: oracle flexcube private banking

Operating System: * *

Trait: 
{
  "version_exact": "2.0"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: oracle flexcube private banking

Operating System: * *

Trait: 
{
  "version_exact": "2.0.1"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: oracle flexcube private banking

Operating System: * *

Trait: 
{
  "version_exact": "3.0"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: siebel apps - e-billing

Operating System: * *

Trait: 
{
  "version_exact": "6.1.1"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: siebel apps - e-billing

Operating System: * *

Trait: 
{
  "version_exact": "6.2"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: siebel apps - e-billing

Operating System: * *

Trait: 
{
  "version_exact": "6.1"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: webcenter sites

Operating System: * *

Trait: 
{
  "version_exact": "11.1.1.6.1"
}

Source: bdu

Type: Configuration

Vendor: oracle corp.

Product: webcenter sites

Operating System: * *

Trait: 
{
  "version_exact": "11.1.1.8.0"
}

Source: bdu