Skip to content
OpenAdvisories

Archive

10 July 2013

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High —
    CVE-2013-1966 Public exploit EPSS 74%

    Arbitrary code execution in Apache Struts

    Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag.

  • High —
    CVE-2013-1965 Public exploit Scanner template EPSS 94%

    Improper Control of Generation of Code in Apache Struts

    Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.

  • High 8.1
    CVE-2013-2115 Public exploit EPSS 75%

    Code injection in Apache Struts

    Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag. NOTE: this issue is due to an incomplete fix for CVE-…

  • High 8.8
    CVE-2013-3163 Exploited Public exploit EPSS 71%

    Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

    KEV Mar 30, 2023