Lucene search
HistoryJan 08, 2012 - 3:55 p.m.
CVE-2012-0393
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
9.3 High
AI Score
Confidence
High
0.919 High
EPSS
Percentile
98.9%
The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public constructors, which allows remote attackers to create or overwrite arbitrary files via a crafted parameter that triggers the creation of a Java object.
Affected configurations
Node
apachestrutsRange2.1.0–2.3.1.1
References
Related
osv
osv
nessus
nessus
f5
f5
K34352169 : Apache Struts vulnerability CVE-2012-0393
2017-09-25 00:00:00
github
github
cvelist
cvelist
CVE-2012-0393
2022-10-03 16:15:38
prion
prion
Design/Logic Flaw
2012-01-08 15:55:00
cve
cve
CVE-2012-0393
2022-10-03 16:15:38
ubuntucve
ubuntucve
CVE-2012-0393
2012-01-08 00:00:00
openvas
openvas
Apache Struts Security Update (S2-008)
2021-09-14 00:00:00
VMSA-2012-0013 VMware vSphere and vCOps updates to third party libraries.
2012-08-31 00:00:00
VMware ESXi/ESX updates to third party libraries (VMSA-2012-0013)
2012-08-31 00:00:00
ibm
ibm
Security Bulletin: Order Management could be subject to an Apache Struts vulnerability that could allow a remote attacker to execute arbitrary code on the system.
2024-04-12 17:44:56
vmware
vmware
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
VMware vSphere and vCOps updates to third party libraries
2012-08-30 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
9.3 High
AI Score
Confidence
High
0.919 High
EPSS
Percentile
98.9%
Related for NVD:CVE-2012-0393