← Back

CVE-2013-4316

nvd nist
Published: Sep 30, 2013Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.

Affected (56)

Apache
1 product
Struts
Oracle
3 products
Flexcube Private Banking
Mysql Enterprise Monitor
Webcenter Sites
Configuration A
45 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Struts
Version 2.0.0
Struts
Version 2.0.10
Struts
Version 2.0.11.1
Struts
Version 2.0.11.2
Struts
Version 2.0.11
Struts
Version 2.0.12
Struts
Version 2.0.13
Struts
Version 2.0.14
Struts
Version 2.0.1
Struts
Version 2.0.2
Struts
Version 2.0.3
Struts
Version 2.0.4
Struts
Version 2.0.5
Struts
Version 2.0.6
Struts
Version 2.0.7
Struts
Version 2.0.8
Struts
Version 2.0.9
Struts
Version 2.1.0
Struts
Version 2.1.1
Struts
Version 2.1.2
Struts
Version 2.1.3
Struts
Version 2.1.4
Struts
Version 2.1.5
Struts
Version 2.1.6
Struts
Version 2.1.8.1
Struts
Version 2.1.8
Struts
Version 2.2.1.1
Struts
Version 2.2.1
Struts
Version 2.2.3.1
Struts
Version 2.2.3
Struts
Version 2.3.1.1
Struts
Version 2.3.1.2
Struts
Version 2.3.12
Struts
Version 2.3.14.1
Struts
Version 2.3.14.2
Struts
Version 2.3.14.3
Struts
Version 2.3.14
Struts
Version 2.3.15.1
Struts
Version 2.3.15
Struts
Version 2.3.1
Struts
Version 2.3.3
Struts
Version 2.3.4.1
Struts
Version 2.3.4
Struts
Version 2.3.7
Struts
Version 2.3.8
Configuration B
11 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Flexcube Private Banking
Version 1.7
Flexcube Private Banking
Version 12.0.1
Flexcube Private Banking
Version 12.0.2
Flexcube Private Banking
Version 2.0.1
Flexcube Private Banking
Version 2.0
Flexcube Private Banking
Version 2.2.0.1
Flexcube Private Banking
Version 3.0
Oracle
Mysql Enterprise Monitor
Up to 2.3.14
Mysql Enterprise Monitor
Up to 3.0.4
Oracle
Webcenter Sites
Version 11.1.1.6.1
Webcenter Sites
Version 11.1.1.8.0

Related CWEs

CWE-16
CWE-16
CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (10)

Source: secalert@redhat.com
Patch
Source: secalert@redhat.com
PatchVendor Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party AdvisoryVDB Entry
Source: secalert@redhat.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.