10
CVE-2013-4316
- EPSS 7.17%
- Veröffentlicht 30.09.2013 21:55:09
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle secalert@redhat.com
- Teams Watchlist Login
- Unerledigt Login
Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Flexcube Private Banking Version1.7
Oracle ≫ Flexcube Private Banking Version2.0
Oracle ≫ Flexcube Private Banking Version2.0.1
Oracle ≫ Flexcube Private Banking Version2.2.0.1
Oracle ≫ Flexcube Private Banking Version3.0
Oracle ≫ Flexcube Private Banking Version12.0.1
Oracle ≫ Flexcube Private Banking Version12.0.2
Oracle ≫ Mysql Enterprise Monitor Version <= 2.3.14
Oracle ≫ Mysql Enterprise Monitor Version <= 3.0.4
Oracle ≫ Webcenter Sites Version11.1.1.6.1
Oracle ≫ Webcenter Sites Version11.1.1.8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.17% | 0.912 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.