| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:a:fujitsu:interstage_business_process_manager_analytics:12.0:*:*:*:*:*:*:*
OR
cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:*:*:*:*:*:*:*:* versions from (including) 5.0 up to (including) 6.10
|
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:a:fujitsu:interstage_business_process_manager_analytics:12.1:*:*:*:*:*:*:*
OR
cpe:2.3:a:oracle:solaris:11:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:*:*:*:*:*:*:*:* versions from (including) 5.0 up to (including) 6.10
|
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:fujitsu:gp-s_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:fujitsu:gp-s:-:*:*:*:*:*:*:*
|
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:fujitsu:gp5000_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:fujitsu:gp5000:-:*:*:*:*:*:*:*
|
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:fujitsu:gp7000f_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:fujitsu:gp7000f:-:*:*:*:*:*:*:*
|
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:fujitsu:primepower_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:fujitsu:primepower:-:*:*:*:*:*:*:*
|
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:fujitsu:primergy_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:fujitsu:primergy:-:*:*:*:*:*:*:*
|
| Added |
CPE Configuration |
|
AND
OR
*cpe:2.3:o:fujitsu:sparc_firmware:-:*:*:*:*:*:*:*
OR
cpe:2.3:h:fujitsu:sparc:-:*:*:*:*:*:*:*
|
| Added |
CPE Configuration |
|
OR
*cpe:2.3:a:oracle:siebel_apps_-_e-billing:6.1:*:*:*:*:*:*:*
*cpe:2.3:a:oracle:siebel_apps_-_e-billing:6.1.1:*:*:*:*:*:*:*
*cpe:2.3:a:oracle:siebel_apps_-_e-billing:6.2:*:*:*:*:*:*:*
|
| Changed |
CPE Configuration |
OR
*cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.10:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.12:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.13:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.0.14:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.1.0:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.1.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.1.2:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.1.3:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.1.4:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.1.5:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.1.6:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.1.8:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.1.8.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.2.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.2.1.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.2.3:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.2.3.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.1.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.1.2:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.3:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.4:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.4.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*
*cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*
|
OR
*cpe:2.3:a:apache:archiva:1.2:-:*:*:*:*:*:*
*cpe:2.3:a:apache:archiva:1.2.2:*:*:*:*:*:*:*
*cpe:2.3:a:apache:archiva:*:*:*:*:*:*:*:* versions from (including) 1.3 up to (excluding) 1.3.8
*cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:* versions from (including) 2.0.0 up to (including) 2.3.15
|
| Added |
CVSS V3.1 |
|
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| Added |
CWE |
|
NIST CWE-74
|
| Removed |
CWE |
NIST CWE-20
|
|
| Changed |
Reference Type |
http://archiva.apache.org/security.html No Types Assigned
|
http://archiva.apache.org/security.html Product
|
| Changed |
Reference Type |
http://cxsecurity.com/issue/WLB-2014010087 No Types Assigned
|
http://cxsecurity.com/issue/WLB-2014010087 Exploit, Third Party Advisory
|
| Changed |
Reference Type |
http://osvdb.org/98445 No Types Assigned
|
http://osvdb.org/98445 Broken Link
|
| Changed |
Reference Type |
http://packetstormsecurity.com/files/159629/Apache-Struts-2-Remote-Code-Execution.html No Types Assigned
|
http://packetstormsecurity.com/files/159629/Apache-Struts-2-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
|
| Changed |
Reference Type |
http://seclists.org/fulldisclosure/2013/Oct/96 No Types Assigned
|
http://seclists.org/fulldisclosure/2013/Oct/96 Exploit, Mailing List, Third Party Advisory
|
| Changed |
Reference Type |
http://seclists.org/oss-sec/2014/q1/89 No Types Assigned
|
http://seclists.org/oss-sec/2014/q1/89 Mailing List, Third Party Advisory
|
| Changed |
Reference Type |
http://struts.apache.org/release/2.3.x/docs/s2-016.html Patch, Vendor Advisory
|
http://struts.apache.org/release/2.3.x/docs/s2-016.html Patch
|
| Changed |
Reference Type |
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2 No Types Assigned
|
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2 Third Party Advisory
|
| Changed |
Reference Type |
http://www.fujitsu.com/global/support/software/security/products-f/interstage-bpm-analytics-201301e.html No Types Assigned
|
http://www.fujitsu.com/global/support/software/security/products-f/interstage-bpm-analytics-201301e.html Third Party Advisory
|
| Changed |
Reference Type |
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html No Types Assigned
|
http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html Patch, Third Party Advisory
|
| Changed |
Reference Type |
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html Patch, Vendor Advisory
|
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html Patch, Third Party Advisory
|
| Changed |
Reference Type |
http://www.securityfocus.com/bid/61189 No Types Assigned
|
http://www.securityfocus.com/bid/61189 Broken Link, Third Party Advisory, VDB Entry
|
| Changed |
Reference Type |
http://www.securityfocus.com/bid/64758 No Types Assigned
|
http://www.securityfocus.com/bid/64758 Broken Link, Third Party Advisory, VDB Entry
|
| Changed |
Reference Type |
http://www.securitytracker.com/id/1029184 No Types Assigned
|
http://www.securitytracker.com/id/1029184 Broken Link, Third Party Advisory, VDB Entry
|
| Changed |
Reference Type |
http://www.securitytracker.com/id/1032916 No Types Assigned
|
http://www.securitytracker.com/id/1032916 Broken Link, Third Party Advisory, VDB Entry
|
| Changed |
Reference Type |
https://exchange.xforce.ibmcloud.com/vulnerabilities/90392 No Types Assigned
|
https://exchange.xforce.ibmcloud.com/vulnerabilities/90392 Third Party Advisory, VDB Entry
|
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
