CVE-2013-2251
Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
Affected Platforms (CPE)
📦
Apache
Archiva
>= 1.3 and < 1.3.8📦
Apache
Archiva
= 1.2📦
Apache
Archiva
= 1.2.2📦
Apache
Struts
>= 2.0.0 and <= 2.3.15📦
Fujitsu
Interstage Business Process Manager Analytics
= 12.0📦
Fujitsu
Interstage Business Process Manager Analytics
= 12.1📦
Oracle
Siebel Apps E Billing
= 6.1📦
Oracle
Siebel Apps E Billing
= 6.1.1📦
Oracle