Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
huaweiHuawei TechnologiesHUAWEI-SA-20140707-01-STRUTS2
HistoryJul 07, 2014 - 12:00 a.m.

Security Advisory-Apache Struts2 vulnerability on Huawei multiple products

2014-07-0700:00:00
Huawei Technologies
www.huawei.com
69

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.97

Percentile

99.8%

JSON

Some versions of Apache Struts2 software used in Huawei devices have security vulnerabilities. A patch released for the software to fix vulnerabilities CVE-2014-0050 and CVE-2014-0094 has the risk of being bypassed. (Vulnerability ID: HWPSIRT-2014-0420)

This Vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2014-0116.

Affected configurations

Vulners
Node
huaweianyofficeMatchv200r002c10spc500
OR
huaweiespace_meetingMatchv100r001c00
OR
huaweieudemon8000e_firmwareMatchv200r001c00
OR
huaweix8_firmwareMatchv200r001c00
OR
huaweiusg9520Matchv200r001c00
OR
huaweiusg9560_firmwareMatchv200r001c00
OR
huaweiusg9580_firmwareMatchv200r001c00
OR
huaweiantiddos_8030_firmwareMatchv100r001c00
OR
huawei8060_firmwareMatchv100r001c00
OR
huawei8080_antiddos_1520_firmwareMatchv100r001c00
OR
huawei1550_firmwareMatchv100r001c00
OR
huaweiatlas_500_firmwareMatchv100r001c00
VendorProductVersionCPE
huaweianyofficev200r002c10spc500cpe:2.3:a:huawei:anyoffice:v200r002c10spc500:*:*:*:*:*:*:*
huaweiespace_meetingv100r001c00cpe:2.3:a:huawei:espace_meeting:v100r001c00:*:*:*:*:*:*:*
huaweieudemon8000e_firmwarev200r001c00cpe:2.3:o:huawei:eudemon8000e_firmware:v200r001c00:*:*:*:*:*:*:*
huaweix8_firmwarev200r001c00cpe:2.3:a:huawei:x8_firmware:v200r001c00:*:*:*:*:*:*:*
huaweiusg9520v200r001c00cpe:2.3:a:huawei:usg9520:v200r001c00:*:*:*:*:*:*:*
huaweiusg9560_firmwarev200r001c00cpe:2.3:o:huawei:usg9560_firmware:v200r001c00:*:*:*:*:*:*:*
huaweiusg9580_firmwarev200r001c00cpe:2.3:o:huawei:usg9580_firmware:v200r001c00:*:*:*:*:*:*:*
huaweiantiddos_8030_firmwarev100r001c00cpe:2.3:a:huawei:antiddos_8030_firmware:v100r001c00:*:*:*:*:*:*:*
huawei8060_firmwarev100r001c00cpe:2.3:a:huawei:8060_firmware:v100r001c00:*:*:*:*:*:*:*
huawei8080_antiddos_1520_firmwarev100r001c00cpe:2.3:a:huawei:8080_antiddos_1520_firmware:v100r001c00:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

Related

openvas 29
nessus 32
threatpost 1
vmware 2
ibm 35
hackerone 1
prion 5
nvd 5
cvelist 5
debian 2
veracode 2
securityvulns 6
atlassian 3
debiancve 1
seebug 5
packetstorm 2
redhat 6
mageia 2
f5 7
exploitpack 1
cve 5
cert 1
osv 6
jvn 2
ubuntucve 5
github 5
checkpoint_advisories 2
fedora 2
tomcat 2
zdt 3
suse 1
amazon 2
exploitdb 3
metasploit 2
gentoo 1
oraclelinux 3
centos 1
ubuntu 1
openvas
openvas
Apache Struts 2.x < 2.3.16.1 Multiple Vulnerabilities (S2-020) - Linux
2019-08-28 00:00:00
Apache Struts Security Update (S2-020) - Version Check
2019-08-28 00:00:00
Mageia: Security Advisory (MGASA-2014-0109)
2022-01-28 00:00:00
nessus
nessus
Apache Struts 2.0.0 < 2.3.16.1 Multiple Vulnerabilities (credentialed check) (Deprecated)
2015-01-30 00:00:00
MySQL Enterprise Monitor 3.0.x < 3.0.11 Multiple Vulnerabilities
2015-05-08 00:00:00
MySQL Enterprise Monitor < 2.3.17 Multiple Vulnerabilities
2015-05-08 00:00:00
threatpost
threatpost
VMware Patches Apache Struts Flaws in vCOPS
2014-06-25 13:59:49
vmware
vmware
VMware product updates address security vulnerabilities in Apache Struts library
2014-06-24 00:00:00
VMware product updates address security vulnerabilities in Apache Struts library
2014-06-24 00:00:00
ibm
ibm
Security Bulletin: The IBM V840 product model number AE1 node is affected by vulnerabilities in Apache’s Struts library
2018-06-18 00:08:27
Security Bulletin: The IBM FlashSystem 840 and V840 product model number AE1 nodes are affected by vulnerabilities in Apache’s Struts library
2023-02-18 01:45:50
Security Bulletin: The IBM FlashSystem V840 product model numbers AC0 and AC1 nodes are affected by vulnerabilities in Apache’s Struts library
2018-06-18 00:08:33
hackerone
hackerone
U.S. Dept Of Defense: Remote code execution vulnerability on a DoD website
2016-12-19 23:00:16
prion
prion
Security feature bypass
2014-03-11 13:00:00
Design/Logic Flaw
2014-04-01 06:27:00
Design/Logic Flaw
2014-05-08 10:55:00
nvd
nvd
CVE-2014-0094
2014-03-11 13:00:37
CVE-2014-0050
2014-04-01 06:27:51
CVE-2014-0116
2014-05-08 10:55:02
cvelist
cvelist
CVE-2014-0094
2014-03-10 14:00:00
CVE-2014-0050
2014-03-28 19:00:00
CVE-2014-0116
2014-05-08 10:00:00
debian
debian
[SECURITY] [DSA 2856-1] libcommons-fileupload-java security update
2014-02-07 22:59:08
[SECURITY] [DSA 2897-1] tomcat7 security update
2014-04-08 18:25:14
veracode
veracode
Denial Of Service (DoS) By An Infinite Loop Causing CPU Consumption
2019-01-15 08:58:15
Class Loader Manipulation With CookieInterceptor
2014-06-06 18:13:23
securityvulns
securityvulns
[SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS
2014-03-31 00:00:00
[security bulletin] HPSBGN03329 rev.1 - HP SDN VAN Controller, Remote Denial of Service &#40;DoS&#41;, Distributed Denial of Service &#40;DDoS&#41;
2015-05-11 00:00:00
HP SDN VAN Controller DoS
2015-05-11 00:00:00
atlassian
atlassian
Security vulnerability in apache commons fileupload
2014-02-10 05:56:15
Security vulnerability in apache commons fileupload
2014-02-10 05:56:15
Security vulnerability in apache commons fileupload
2014-02-10 05:56:15
debiancve
debiancve
CVE-2014-0050
2014-04-01 06:27:51
seebug
seebug
Apache Commons FileUpload/Apache Tomcat拒绝服务漏洞
2014-02-13 00:00:00
Apache Struts ClassLoader操作漏洞
2014-03-10 00:00:00
Apache Commons FileUpload and Apache Tomcat - Denial-of-Service
2014-07-01 00:00:00
packetstorm
packetstorm
Apache Commons FileUpload and Apache Tomcat Denial of Service
2024-08-31 00:00:00
Apache Struts ClassLoader Manipulation Remote Code Execution
2014-05-02 00:00:00
redhat
redhat
(RHSA-2014:0253) Moderate: Red Hat JBoss Enterprise Application Platform 6.2.1 security update
2014-03-05 00:00:00
(RHSA-2014:0252) Moderate: Red Hat JBoss Enterprise Application Platform 6.2.1 security update
2014-03-05 18:50:05
(RHSA-2014:0429) Moderate: tomcat6 security update
2014-04-23 00:00:00
mageia
mageia
Updated apache-commons-fileupload package fixes CVE-2014-0050
2014-02-28 22:57:52
Updated tomcat packages fix CVE-2014-0050
2014-02-28 22:59:29
f5
f5
SOL15189 - Apache Commons FileUpload vulnerability CVE-2014-0050
2014-04-18 00:00:00
K15260 : Apache Struts vulnerability CVE-2014-0094
2014-05-15 00:00:00
K15189 : Apache Commons FileUpload vulnerability CVE-2014-0050
2015-08-15 00:00:00
exploitpack
exploitpack
Apache Commons FileUpload and Apache Tomcat - Denial of Service
2014-02-12 00:00:00
cve
cve
CVE-2014-0094
2014-03-11 13:00:37
CVE-2014-0050
2014-04-01 06:27:51
CVE-2014-0116
2014-05-08 10:55:02
cert
cert
Apache Struts2 ClassLoader allows access to class properties via request parameters
2014-04-25 00:00:00
osv
osv
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:15
Commons FileUpload Denial of service vulnerability
2018-12-21 17:51:42
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:14
jvn
jvn
JVN#14876762: Apache Commons FileUpload vulnerable to denial-of-service (DoS)
2014-02-10 00:00:00
JVN#19294237: Apache Struts vulnerable to ClassLoader manipulation
2014-04-25 00:00:00
ubuntucve
ubuntucve
CVE-2014-0094
2014-03-11 00:00:00
CVE-2014-0050
2014-02-07 00:00:00
CVE-2014-0116
2014-05-08 00:00:00
github
github
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:15
Commons FileUpload Denial of service vulnerability
2018-12-21 17:51:42
ClassLoader manipulation in Apache Struts
2022-05-14 00:54:14
checkpoint_advisories
checkpoint_advisories
Apache Tomcat FileUpload Content-Type Header Infinite Loop (CVE-2014-0050)
2014-03-16 00:00:00
Apache Struts ParametersInterceptor ClassLoader Security Bypass (CVE-2014-0094; CVE-2014-0112; CVE-2014-0113; CVE-2014-0114)
2014-04-25 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: apache-commons-fileupload-1.3-5.fc19
2014-02-17 21:07:04
[SECURITY] Fedora 20 Update: apache-commons-fileupload-1.3-5.fc20
2014-02-17 21:06:10
tomcat
tomcat
Fixed in Apache Tomcat 8.0.3
2014-02-11 00:00:00
Fixed in Apache Tomcat 7.0.52
2014-02-17 00:00:00
zdt
zdt
Apache Commons FileUpload and Apache Tomcat Denial of Service
2014-02-12 00:00:00
Apache Struts ClassLoader Manipulation Remote Code Execution Exploit
2014-05-03 00:00:00
Apache Struts < 1.3.10 / < 2.3.16.2 - ClassLoader Manipulation Remote Code Execution Exploit
2017-03-23 00:00:00
suse
suse
Security update for jakarta-commons-fileupload (important)
2014-04-17 21:04:15
amazon
amazon
Medium: tomcat7
2014-03-24 23:36:00
Medium: tomcat6
2014-05-21 10:45:00
exploitdb
exploitdb
Apache Commons FileUpload and Apache Tomcat - Denial of Service
2014-02-12 00:00:00
Apache Struts - ClassLoader Manipulation Remote Code Execution (Metasploit)
2014-05-02 00:00:00
Apache Struts &lt; 1.3.10 / &lt; 2.3.16.2 - ClassLoader Manipulation Remote Code Execution (Metasploit)
2014-03-06 00:00:00
metasploit
metasploit
Apache Commons FileUpload and Apache Tomcat DoS
2014-02-22 13:56:59
Apache Struts ClassLoader Manipulation Remote Code Execution
2014-04-29 15:36:04
gentoo
gentoo
Apache Commons FileUpload: Multiple vulnerabilities
2021-07-17 00:00:00
oraclelinux
oraclelinux
tomcat6 security update
2014-04-23 00:00:00
tomcat security update
2014-07-20 00:00:00
tomcat6 security and bug fix update
2014-07-09 00:00:00
centos
centos
tomcat6 security update
2014-04-23 19:07:14
ubuntu
ubuntu
Tomcat vulnerabilities
2014-03-06 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.97

Percentile

99.8%

JSON
Related for HUAWEI-SA-20140707-01-STRUTS2
openvas29nessus32threatpost1vmware2ibm35hackerone1prion5nvd5cvelist5debian2veracode2securityvulns6atlassian3debiancve1seebug5packetstorm2redhat6mageia2f57exploitpack1cve5cert1osv6jvn2ubuntucve5github5checkpoint_advisories2fedora2tomcat2zdt3suse1amazon2exploitdb3metasploit2gentoo1oraclelinux3centos1ubuntu1