Lucene search

K
f5F5F5:K34352169
HistorySep 25, 2017 - 12:00 a.m.

K34352169 : Apache Struts vulnerability CVE-2012-0393

2017-09-2500:00:00
my.f5.com
22

9.2 High

AI Score

Confidence

High

0.919 High

EPSS

Percentile

98.9%

Security Advisory Description

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object. (CVE-2012-0393)

Impact

There is no impact; F5 products are not affected by this vulnerability.

9.2 High

AI Score

Confidence

High

0.919 High

EPSS

Percentile

98.9%