DeutschShown in its original language — a full translation is planned for a future version.
Apache Struts: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes
view advisory published 2014-05-06
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Struts ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2014-0114US | high7.5 | Exploit | ||
Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, doe… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update: Security Update für Strutsexternal
- Oracle Critical Patch Update Advisory Appendix Retail Applications vom 2014-10-14external
- Red Hat Security Advisory RHSA-2019:2995 vom 2019-10-10external
- HP Security Bulletin c04473828 vom 2014-10-14external
- HP Security Bulletin HPSBGN03669 vom 2016-11-07external
- NetApp Advisory Number NTAP-20140911-0001 vom 2017-04-06external
- Oracle Linux Security Advisory ELSA-2025-10814 vom 2025-07-30external
- Oracle Linux Security Advisory ELSA-2020-0194 vom 2020-04-24external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan