Apache Struts ClassLoader Manipulation CVE-2014-0114 Security Bypass Vulnerability

Bugtraq ID:	67121
Class:	Design Error
CVE:	CVE-2014-0114
Remote:	Yes
Local:	No
Published:	Apr 29 2014 12:00AM
Updated:	Jul 17 2019 07:00AM
Credit:	Rene Gielen
Vulnerable:	VMWare vCenter Server 5.5 VMWare vCenter Server 5.1 VMWare vCenter Server 5.0 SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 SuSE Manager (for SLE 11 SP2) 1.7 Redhat Network Satellite Server (for RHEL 6) 5.6 Redhat Network Satellite Server (for RHEL 6) 5.5 Redhat Network Satellite Server (for RHEL 6) 5.4 Redhat JBoss Operations Network 3.2.1 Redhat JBoss Fuse 6.1.0 Redhat Fuse ESB Enterprise 7.1.0 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux 5 Server Oracle Weblogic Server 12.1.3 Oracle Weblogic Server 12.1.2 0 Oracle Weblogic Server 12.1.1 0 Oracle Weblogic Server 10.3.6 0 Oracle Weblogic Server 12.2.1.2 Oracle Weblogic Server 12.2.1.1 Oracle Weblogic Server 12.2.1.0 Oracle Weblogic Server 12.1.3.0 Oracle Weblogic Server 10.0.2 Oracle Weblogic Portal 10.3.6.0 Oracle Weblogic Portal 10.2.1.0 Oracle Weblogic Portal 10.0.1.0 Oracle Waveset 8.1.1 Oracle Utilities Framework 4.3.0.3.0 Oracle Utilities Framework 4.3.0.2.0 Oracle Utilities Framework 4.3.0.1.0 Oracle Utilities Framework 4.2.0.3.0 Oracle Utilities Framework 4.2.0.2.0 Oracle Utilities Framework 4.2.0.1.0 Oracle Utilities Framework 4.1.0.2.0 Oracle Utilities Framework 4.1.0.1.0 Oracle Retail Returns Management 2.0 Oracle Retail Returns Management 14.0 Oracle Retail Returns Management 13.4 Oracle Retail Returns Management 13.3 Oracle Retail Returns Management 13.2 Oracle Retail Returns Management 13.1 Oracle Retail Markdown Optimization 13.4 Oracle Retail Markdown Optimization 13.2 Oracle Retail Markdown Optimization 13.1 Oracle Retail Markdown Optimization 13.0 Oracle Retail Markdown Optimization 12.0 Oracle Retail Invoice Matching 14.1 Oracle Retail Invoice Matching 14.0 Oracle Retail Invoice Matching 13.2 Oracle Retail Invoice Matching 13.1 Oracle Retail Invoice Matching 13.0 Oracle Retail Invoice Matching 12.1 Oracle Retail Invoice Matching 12.0IN Oracle Retail Invoice Matching 12.0 Oracle Retail Invoice Matching 11.0 Oracle Retail Clearance Optimization Engine 14.0 Oracle Retail Clearance Optimization Engine 13.4 Oracle Retail Clearance Optimization Engine 13.3 Oracle Retail Central Office 8.0 Oracle Retail Central Office 14.0 Oracle Retail Central Office 13.4 Oracle Retail Central Office 13.3 Oracle Retail Central Office 13.2 Oracle Retail Central Office 13.1 Oracle Retail Central Office 13.0 Oracle Retail Central Office 12.0.9IN Oracle Retail Central Office 12.0 Oracle Retail Back Office 8.0 Oracle Retail Back Office 14.1 Oracle Retail Back Office 14.0 Oracle Retail Back Office 13.4 Oracle Retail Back Office 13.3 Oracle Retail Back Office 13.2 Oracle Retail Back Office 13.1 Oracle Retail Back Office 13.0 Oracle Retail Back Office 12.0.9IN Oracle Retail Back Office 12.0 Oracle Retail Allocation 13.2 Oracle Retail Allocation 13.1 Oracle Retail Allocation 13.0 Oracle Retail Allocation 12.0 Oracle Retail Allocation 11.0 Oracle Retail Allocation 10.0 Oracle Real-Time Decision Server 11.1.1.7 Oracle Real-Time Decision Platform 3.0 Oracle Primavera P6 Enterprise Project Portfolio Management 8.4 Oracle Primavera P6 Enterprise Project Portfolio Management 8.3 Oracle Primavera P6 Enterprise Project Portfolio Management 8.2 Oracle Primavera P6 Enterprise Project Portfolio Management 8.1 Oracle Primavera P6 Enterprise Project Portfolio Management 8.0 Oracle Primavera P6 Enterprise Project Portfolio Management 7.0 Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Primavera Contract Management 14.0 Oracle Primavera Contract Management 13.1 Oracle Knowledge 8.5.1 Oracle Knowledge 8.6.1 Oracle Knowledge 8.6.0 Oracle Knowledge 8.5.1.7 Oracle JDeveloper 12.1.3 0 Oracle JDeveloper 12.1.2 0.0 Oracle JDeveloper 11.1.2 4.0 Oracle JDeveloper 11.1.1 7.0 Oracle JDeveloper 10.1.3.5.0 Oracle Insurance IFRS 17 Analyzer 8.0.7 Oracle Insurance IFRS 17 Analyzer 8.0.6 Oracle Identity Manager 11.1.2 2 Oracle Identity Manager 11.1.2 1.0 Oracle Identity Manager 11.1.1.7 Oracle Identity Manager 11.1.1.5 Oracle Fusion Middleware 11.1.2 2.0 Oracle Fusion Middleware 11.1.2 1.0 Oracle Fusion Middleware 11.1.1 7.0 Oracle Fusion Middleware 11.1.1.5.0 Oracle Enterprise Linux 5 Oracle Enterprise Data Quality 9.0.11 Oracle Enterprise Data Quality 8.1.2 Oracle Communications WebRTC Session Controller 7.2 Oracle Communications WebRTC Session Controller 7.1 Oracle Communications WebRTC Session Controller 7.0 Oracle Communications MetaSolv Solution 6.2.1 0.0 NTT DATA Corporation TERASOLUNA Server Framework for Java 2.0.5 1 NTT DATA Corporation TERASOLUNA Server Framework for Java 2.0 1 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Liferay Portal 6.2.1-ce-ga2-securit Liferay Portal 6.2.1 Juniper Security Threat Response Manager 2013.2 Juniper Security Threat Response Manager 2012.1 Juniper Secure Analytics 2013.2 Juniper Secure Analytics 2012.1 IBM WebSphere Service Registry and Repository 8.5 IBM WebSphere Service Registry and Repository 8.0 IBM WebSphere Service Registry and Repository 7.5 IBM WebSphere Service Registry and Repository 7.0 IBM WebSphere Service Registry and Repository 6.3 IBM WebSphere Service Registry and Repository 6.2 IBM WebSphere Sensor Events 7.0 IBM Websphere Portal 7.0 IBM Websphere Portal 8.5 IBM Websphere Portal 8.0 IBM Websphere Portal 6.1 IBM WebSphere Partner Gateway Express Edition 6.0.0.3 IBM WebSphere Partner Gateway Express Edition 6.0 IBM WebSphere Partner Gateway Enterprise Edition 6.2 IBM WebSphere Partner Gateway Advanced Edition 6.2 IBM WebSphere Lombardi Edition 7.2 IBM WebSphere Lombardi Edition 7.1.0 IBM WebSphere Enterprise Service Bus 7.5 IBM WebSphere Enterprise Service Bus 7 IBM WebSphere Enterprise Service Bus 6.2 IBM Websphere Application Server 8.5.5 IBM Websphere Application Server 8.0 2 IBM Websphere Application Server 8.0 1 IBM Websphere Application Server 7.0 21 IBM Websphere Application Server 8.5 IBM Websphere Application Server 8.0.0.3 IBM Websphere Application Server 8.0 IBM Websphere Application Server 7.0.0.31 IBM Websphere Application Server 7.0.0.27 IBM Websphere Application Server 7.0.0.25 IBM Websphere Application Server 7.0.0.23 IBM Websphere Application Server 7.0.0.19 IBM Websphere Application Server 7.0.0.17 IBM Websphere Application Server 7.0.0.15 IBM Websphere Application Server 7.0.0.13 IBM Websphere Application Server 7.0 IBM Websphere Application Server 6.1.0.47 IBM Websphere Application Server 6.1.0.45 IBM Websphere Application Server 6.1.0.43 IBM Websphere Application Server 6.1.0.39 IBM Websphere Application Server 6.1.0.37 IBM Websphere Application Server 6.1.0.35 IBM Websphere Application Server 6.1.0.34 IBM Websphere Application Server 6.1.0.33 IBM Websphere Application Server 6.1.0.31 IBM Websphere Application Server 6.1 IBM WEB Interface for Content Management 1.0.4 IBM Tivoli Workload Scheduler z/OS Connector 8.5.1 IBM Tivoli Workload Scheduler z/OS Connector 8.5 IBM Tivoli Workload Scheduler Distributed 8.6 IBM Tivoli Workload Scheduler Distributed 8.5.1 IBM Tivoli Workload Scheduler Distributed 8.5 IBM Tivoli Workload Scheduler Distributed 8.4 IBM Tivoli System Automation Application Manager 3.2.2 IBM Tivoli System Automation Application Manager 3.2.1 IBM Tivoli System Automation Application Manager 3.2 IBM Tivoli System Automation Application Manager 3.1 IBM Tivoli Storage Productivity Center 5.1.1 3 IBM Tivoli Storage Productivity Center 5.1.1 IBM Tivoli Storage Productivity Center 5.1 IBM Tivoli Storage Productivity Center 4.2.2 143 IBM Tivoli Storage Productivity Center 5.1.1.4 IBM Tivoli Storage Productivity Center 5.1.1.2 IBM Tivoli Storage Productivity Center 5.1.1.1 IBM Tivoli Storage Productivity Center 5.1.1.0 IBM Tivoli Storage Productivity Center 5.1 IBM Tivoli Storage Productivity Center 4.2.2.177 IBM Tivoli Storage Productivity Center 4.2.2.145 IBM Tivoli Storage Productivity Center 4.2.1 IBM Tivoli Storage Productivity Center 4.2.0 IBM Tivoli Storage Productivity Center 4.1 IBM Tivoli Storage Manager Administration Center 6.3 IBM Tivoli Storage Manager Administration Center 6.2 IBM Tivoli Storage Manager Administration Center 6.1 IBM Tivoli Storage Manager 6.3.0 IBM Tivoli Storage Manager 6.2 IBM Tivoli Storage Manager 6.1 IBM Tivoli Provisioning Manager for Software 5.1 IBM Tivoli Provisioning Manager 7.2 IBM Tivoli Provisioning Manager 7.1 IBM Tivoli Provisioning Manager 5.1 IBM Tivoli Netcool/OMNIbus Web GUI 7.4 IBM Tivoli Netcool/OMNIbus Web GUI 7.3.1 IBM Tivoli Netcool/OMNIbus Web GUI 7.3 IBM Tivoli Netcool Configuration Manager 6.4.1 IBM Tivoli Netcool Configuration Manager 6.3 IBM Tivoli Netcool Configuration Manager 6.4 IBM Tivoli Netcool Configuration Manager 6.2 IBM Tivoli Integrated Portal 1.1.1 15 IBM Tivoli Integrated Portal 1.1.1 14 IBM Tivoli Integrated Portal 2.2 IBM Tivoli Integrated Portal 2.1 IBM Tivoli Integrated Portal 1.1.1.19 IBM Tivoli Integrated Portal 1.1 IBM Tivoli Identity Manager 5.1 IBM Tivoli Identity Manager 5.0 IBM Tivoli Foundations for Application Manager 1.2 IBM Tivoli Endpoint Manager for Remote Control 9.0 IBM Tivoli Endpoint Manager for Remote Control 8.2.1 IBM Tivoli Endpoint Manager for Remote Control 9.0.1 IBM Tivoli Endpoint Manager for Remote Control 8.2 IBM Tivoli Dynamic Workload Console 8.5.1 IBM Tivoli Dynamic Workload Console 8.5 IBM Tivoli Dynamic Workload Console 8.4 IBM Tivoli Dynamic Workload Console 8.6.0.0 IBM Tivoli Composite Application Manager for Websphere 6.1 IBM Tivoli Composite Application Manager for Application Diagnostics 7.1 IBM Tivoli Application Dependency Discovery Manager 7.2.2 IBM Tivoli Application Dependency Discovery Manager 7.2.1 IBM Tivoli Application Dependency Discovery Manager 7.2 IBM Tivoli Application Dependency Discovery Manager 7.1.2 IBM Social Media Analytics 1.3 IBM Social Media Analytics 1.2 IBM Smart Analytics System 7700 0 IBM Smart Analytics System 7600 0 IBM Smart Analytics System 5710 0 IBM Smart Analytics System 5600 2 IBM Smart Analytics System 5600 1 IBM Smart Analytics System 2050 0 IBM Smart Analytics System 1050 0 IBM Security SiteProtector System 3.1 IBM Security SiteProtector System 3.0 IBM Security QRadar 7.2.2 IBM Security QRadar 7.2 IBM Security QRadar 7.1 IBM Security QRadar 7.0 IBM Security Identity Manager 6.0 IBM Records Manager 8.5 IBM Records Manager 8.4 IBM Rational Reporting for Development Intelligence 2.0.6 IBM Rational Reporting for Development Intelligence 2.0.5 IBM Rational Reporting for Development Intelligence 2.0.4 IBM Rational Reporting for Development Intelligence 2.0.3 IBM Rational Reporting for Development Intelligence 2.0.1 IBM Rational Reporting for Development Intelligence 2.0 1 IBM Rational Reporting for Development Intelligence 1.0.2 1 IBM Rational Reporting for Development Intelligence 1.0.2 IBM Rational Reporting for Development Intelligence 2.0 IBM Rational Insight 1.1.1 3 IBM Rational Insight 1.1.1 2 IBM Rational Insight 1.1.1 1 IBM Rational Insight 1.1.1 IBM Rational Insight 1.0.1 1 IBM Rational Insight 1.0.1 IBM Rational Insight 1.1 IBM Rational Insight 1.0.1 iFix1 IBM Rational Application Developer 9.0.1 IBM Rational Application Developer 8.5.5 IBM Rational Application Developer 8.5.1 IBM Rational Application Developer 8.0.4 3 IBM Rational Application Developer 8.0.4 2 IBM Rational Application Developer 8.0.4 1 IBM Rational Application Developer 8.0.4 IBM Rational Application Developer 8.0.3 IBM Rational Application Developer 8.0.2 IBM Rational Application Developer 8.0.1 IBM Rational Application Developer 7.5.5 5 IBM Rational Application Developer 7.5.5 3 IBM Rational Application Developer 7.5.5 2 IBM Rational Application Developer 7.5.5 1 IBM Rational Application Developer 7.5.5 IBM Rational Application Developer 7.5.4 IBM Rational Application Developer 7.5.3 IBM Rational Application Developer 7.5.2 IBM Rational Application Developer 7.5.1 IBM Rational Application Developer 7.0 9 IBM Rational Application Developer 7.0 8 IBM Rational Application Developer 7.0 7 IBM Rational Application Developer 7.0 6 IBM Rational Application Developer 7.0 5 IBM Rational Application Developer 7.0 4 IBM Rational Application Developer 7.0 3 IBM Rational Application Developer 7.0 2 IBM Rational Application Developer 7.0 10 IBM Rational Application Developer 7.0 1 IBM Rational Application Developer 9.1 IBM Rational Application Developer 9.0 IBM Rational Application Developer 8.5 IBM Rational Application Developer 8.0 IBM Rational Application Developer 7.5 IBM Rational Application Developer 7.0 IBM QRadar SIEM 7.2 MR2 IBM QRadar SIEM 7.1 MR2 IBM QRadar SIEM 7.0 MR5 IBM Predictive Insight 9.1 IBM Predictive Insight 7.0 IBM OpenPages GRC Platform 7.0 IBM OpenPages GRC Platform 6.2.1 IBM OpenPages 7.0 IBM OpenPages 6.1.0.1 IBM OpenPages 6.0.1.5 IBM OpenPages 6.0 IBM OmniFind Enterprise Edition 9.1 IBM Lotus Quickr for WebSphere Portal 8.5 IBM Lotus Expeditor 6.2.3 IBM Lotus Expeditor 6.2.2 IBM Lotus Expeditor 6.2.1 IBM Lotus Expeditor 6.2 IBM Leads 9.1 IBM Leads 7.0 IBM Infosphere Master Data Management Server For Product Information 9.1 IBM Infosphere Master Data Management Server For Product Information 9.0 IBM InfoSphere Master Data Management - Collaborative Edition 11.0 IBM InfoSphere Master Data Management - Collaborative Edition 10.1 IBM InfoSphere Master Data Management - Collaborative Edition 10.0 IBM InfoSphere MashupHub 3.0 IBM InfoSphere MashupHub 2.0 IBM InfoSphere Information Server 9.1.2.0 IBM InfoSphere Information Server 9.1 IBM InfoSphere Information Server 8.7 IBM InfoSphere Information Server 8.5 IBM InfoSphere Information Server 8.1 IBM InfoSphere Information Server 8.0 IBM InfoSphere Identity Insight 8.1 IBM InfoSphere Identity Insight 8.0 IBM InfoSphere Balanced Warehouse D5100 IBM InfoSphere Balanced Warehouse C4000 IBM InfoSphere Balanced Warehouse C3000 IBM IBM InfoSphere Information Server 9.1 IBM IBM InfoSphere Information Server 8.7 IBM IBM InfoSphere Information Server 8.5 IBM IBM InfoSphere Information Server 8.1 IBM Financial Transaction Manager 2.1 IBM FileNet P8 Platform Content Search Engine 4.5.1 IBM FileNet P8 Platform Content Search Engine 5.1 IBM FileNet P8 Platform Content Search Engine 5.0 IBM FileNet Content Manager Content Engine 5.2.0 IBM Endpoint Manager for Remote Control 9.1.0 IBM DS8870 7.3 IBM DS8870 7.2 IBM DS8870 7.1 IBM DS8870 7.0 IBM Distributed Marketing 9.1 IBM Distributed Marketing 9.0 IBM Distributed Marketing 8.6 IBM Distributed Marketing 8.5 IBM Distributed Marketing 8.2 IBM Distributed Marketing 8.0 IBM Distributed Marketing 7.5 IBM Distributed Marketing 7.0 IBM Content Navigator 2.0.2 IBM Content Navigator 2.0.1 IBM Content Navigator 2.0 IBM Content Manager Records Enabler 8.5 IBM Content Manager Records Enabler 8.4 IBM Content Collector 2.2 IBM Content Analytics with Enterprise Search 3.0 IBM Content Analytics with Enterprise Search 2.2 IBM Contact Optimization 9.1 IBM Contact Optimization 8.0 IBM Contact Optimization 7.0 IBM Connections 3.0 0 IBM Connections 2.0.1 0 IBM Connections 5.0 IBM Connections 4.5 IBM Connections 4.0 IBM Connections 3.0.1.1 IBM Connections 3.0.1.0 IBM Connections 3.0.1 IBM Connections 3.0 IBM Connections 2.5.0.3 IBM Connections 2.5.0.2 IBM Connections 2.5.0.1 IBM Connections 2.5.0.0 IBM Connections 2.0.1.1 IBM Connections 2.0.0.0 IBM Cognos Business Intelligence 10.2.1 IBM Cognos Business Intelligence 10.1.1 IBM Cognos Business Intelligence 8.4.1 IBM Cognos Business Intelligence 10.2 IBM Cognos Business Intelligence 10.1 IBM Campaign 9.1 IBM Campaign 9.0 IBM Campaign 8.6 IBM Campaign 8.5 IBM Campaign 8.3 IBM Campaign 8.2 IBM Campaign 8.1 IBM Campaign 8.0 IBM Campaign 7.6 IBM Campaign 7.5 IBM Campaign 7.4 IBM Campaign 7.3 IBM Campaign 7.2 IBM Campaign 7.1 IBM Campaign 7.0 IBM Business Process Manager Standard 8.5.5 IBM Business Process Manager Standard 8.5.0 IBM Business Process Manager Standard 8.0.x IBM Business Process Manager Standard 7.5.0 IBM Business Process Manager Express 8.5.5 IBM Business Process Manager Express 8.5.0 IBM Business Process Manager Express 8.0.0 IBM Business Process Manager Express 7.5.0 IBM Business Process Manager Advanced 8.5.5 IBM Business Process Manager Advanced 8.5 IBM Business Process Manager Advanced 8.5.0.1 IBM Business Process Manager Advanced 8.0.1.2 IBM Business Process Manager Advanced 8.0.1.1 IBM Business Process Manager Advanced 8.0.0 IBM Business Process Manager Advanced 7.5.1.2 IBM Business Process Manager Advanced 7.5.1.1 IBM Business Process Manager Advanced 7.5.0 IBM Application Manager for Smart Business 1.2.1 HP XP7 Global Link Manager Software 8.0.0-00 HP XP7 Global Link Manager Software 7.6.0-02 HP XP7 Global Link Manager Software 6.4.0-00 HP XP P9000 Tiered Storage Manager 8.0.0-06 HP XP P9000 Tiered Storage Manager 8.0.0-00 HP XP P9000 Tiered Storage Manager 7.6.1-06 HP XP P9000 Tiered Storage Manager 1.1.0-00 HP XP P9000 Replication Manager 8.0.0-06 HP XP P9000 Replication Manager 8.0.0-00 HP XP P9000 Replication Manager 7.6.1-06 HP XP P9000 Replication Manager 6.0.0-00 HP XP P9000 Replication Manager 5.0.0-00 HP SiteScope Monitors 11.32IP1 HP SiteScope Monitors 11.20 HP SiteScope 11.24 HP SiteScope 11.22 HP SiteScope 11.21 HP SiteScope 11.20 HP SiteScope 11.2 HP SiteScope 11.12 HP SiteScope 11.11 HP SiteScope 11.10 HP SiteScope 11.1 HP IceWall Configuration Manager 3.0 HP Device Manager 8.0.0-06 HP Device Manager 8.0.0-00 HP Device Manager 7.6.1-06 HP Device Manager 1.0.0-00 Hitachi Tuning Manager Software 7.0 01 (Windows) Hitachi Tuning Manager Software 7.0 01 (Solaris(SPARC)) Hitachi Tuning Manager Software 7.0 (Windows) Hitachi Tuning Manager Software 7.0 (Solaris(SPARC)) Hitachi Tuning Manager Software 6.4 02 (Windows) Hitachi Tuning Manager Software 6.4 02 (Solaris(SPARC)) Hitachi Tuning Manager Software 6.4 01 (Windows) Hitachi Tuning Manager Software 6.4 01 (Solaris(SPARC)) Hitachi Tuning Manager Software 6.2 -01 (Windows) Hitachi Tuning Manager Software 6.2 -01 (Solaris(SPARC)) Hitachi Tuning Manager Software 6.2 -00 (Windows) Hitachi Tuning Manager Software 6.2 -00 (Solaris(SPARC)) Hitachi Tuning Manager Software 6.1 -00 (Windows) Hitachi Tuning Manager Software 6.1 -00 (Solaris(SPARC)) Hitachi Tuning Manager Software 6.0 (Windows) Hitachi Tuning Manager Software 6.0 (Solaris(SPARC)) Hitachi Tuning Manager Software 8.0.0-05 (Windows) Hitachi Tuning Manager Software 8.0.0-05 (Linux(SuSE Hitachi Tuning Manager Software 8.0.0-05 (Linux(RHEL Hitachi Tuning Manager Software 8.0.0-04 (Windows) Hitachi Tuning Manager Software 8.0.0-04 (Linux) Hitachi Tuning Manager Software 8.0.0-03 (Windows) Hitachi Tuning Manager Software 8.0.0-03 (Linux) Hitachi Tuning Manager Software 8.0.0-00 (Windows) Hitachi Tuning Manager Software 8.0.0-00 (Linux(SuSE Hitachi Tuning Manager Software 8.0.0-00 (Linux(RHEL Hitachi Tuning Manager Software 7.6.1-05 (Windows) Hitachi Tuning Manager Software 7.6.1-05 (Solaris) Hitachi Tuning Manager Software 7.6.1-05 (Solaris(x6 Hitachi Tuning Manager Software 7.6.1-05 (Solaris(SP Hitachi Tuning Manager Software 7.6.1-05 (Linux(RHEL Hitachi Tuning Manager Software 7.5.0-02 Hitachi Tuning Manager Software 7.4.0-02 (Windows) Hitachi Tuning Manager Software 7.4.0-02 (Solaris(SP Hitachi Tuning Manager Software 7.4.0-02 (Linux) Hitachi Tuning Manager Software 7.4.0-01 (Windows) Hitachi Tuning Manager Software 7.4.0-01 (Solaris(SP Hitachi Tuning Manager Software 7.4.0-01 (Linux) Hitachi Tuning Manager Software 7.2.1-00 Hitachi Tuning Manager Software 7.1.0-00 (Windows) Hitachi Tuning Manager Software 7.1.0 (Linux) Hitachi Tuning Manager Software 7.0.0-00 Hitachi Tuning Manager Software 6.4.0-03 (Windows) Hitachi Tuning Manager Software 6.4.0-03 (Solaris(SP Hitachi Tuning Manager Software 6.0.0 (Solaris) Hitachi Tuning Manager Software 3.5.0 (windows) Hitachi Tiered Storage Manager Software 7.3 -00 (Windows) Hitachi Tiered Storage Manager Software 7.3 -00 (Solaris(x64)) Hitachi Tiered Storage Manager Software 7.3 -00 (Solaris(SPARC)) Hitachi Tiered Storage Manager Software 7.3 -00 (Linux(SLES)) Hitachi Tiered Storage Manager Software 7.3 -00 (Linux(RHEL)) Hitachi Tiered Storage Manager Software 7.1.1 -00(Windows) Hitachi Tiered Storage Manager Software 7.1.1 -00(Solaris(x64)) Hitachi Tiered Storage Manager Software 7.1.1 -00(Solaris(SPARC)) Hitachi Tiered Storage Manager Software 7.1.1 -00(Linux(SLES)) Hitachi Tiered Storage Manager Software 7.1.1 -00(Linux(RHEL)) Hitachi Tiered Storage Manager Software 7.0 -00 (Solaris(x64)) Hitachi Tiered Storage Manager Software 6.2 -01 (Windows) Hitachi Tiered Storage Manager Software 6.2 -01 (Solaris(x64)) Hitachi Tiered Storage Manager Software 6.2 -01 (Solaris(SPARC)) Hitachi Tiered Storage Manager Software 6.2 -01 (Linux) Hitachi Tiered Storage Manager Software 6.2 -00 (Windows) Hitachi Tiered Storage Manager Software 6.2 -00 (Solaris(x64)) Hitachi Tiered Storage Manager Software 6.2 -00 (Solaris(SPARC)) Hitachi Tiered Storage Manager Software 6.2 -00 (Linux) Hitachi Tiered Storage Manager Software 6.1.1 -01 (Windows) Hitachi Tiered Storage Manager Software 6.1.1 -01 (Solaris(x64)) Hitachi Tiered Storage Manager Software 6.1.1 -01 (Solaris(SPARC)) Hitachi Tiered Storage Manager Software 6.1.1 -01 (Linux) Hitachi Tiered Storage Manager Software 6.1.1 -00 (Windows) Hitachi Tiered Storage Manager Software 6.1.1 -00 (Solaris(x64)) Hitachi Tiered Storage Manager Software 6.1.1 -00 (Solaris(SPARC)) Hitachi Tiered Storage Manager Software 6.1.1 -00 (Linux) Hitachi Tiered Storage Manager Software 6.1 -01 (Windows) Hitachi Tiered Storage Manager Software 6.1 -01 (Solaris(x64)) Hitachi Tiered Storage Manager Software 6.1 -01 (Solaris(SPARC)) Hitachi Tiered Storage Manager Software 6.1 -01 (Linux) Hitachi Tiered Storage Manager Software 6.1 -00 (Windows) Hitachi Tiered Storage Manager Software 6.1 -00 (Solaris(x64)) Hitachi Tiered Storage Manager Software 6.1 -00 (Solaris(SPARC)) Hitachi Tiered Storage Manager Software 6.1 -00 (Linux) Hitachi Tiered Storage Manager Software 8.0.0-05 (Windows) Hitachi Tiered Storage Manager Software 8.0.0-05 (Linux(SuSE Hitachi Tiered Storage Manager Software 8.0.0-05 (Linux(RHEL Hitachi Tiered Storage Manager Software 8.0.0-00 (Windows) Hitachi Tiered Storage Manager Software 8.0.0-00 (Linux(SuSE Hitachi Tiered Storage Manager Software 8.0.0-00 (Linux(RHEL Hitachi Tiered Storage Manager Software 7.6.1-05 (Windows) Hitachi Tiered Storage Manager Software 7.6.1-05 (Solaris(x6 Hitachi Tiered Storage Manager Software 7.6.1-05 (Solaris(SP Hitachi Tiered Storage Manager Software 7.6.1-05 (Linux(RHEL Hitachi Tiered Storage Manager Software 7.5.0-02 Hitachi Tiered Storage Manager Software 7.2.1-00 Hitachi Tiered Storage Manager Software 7.1.1-00 Hitachi Tiered Storage Manager Software 7.1.0-00 (Windows) Hitachi Tiered Storage Manager Software 7.1.0-00 (Solaris(SP Hitachi Tiered Storage Manager Software 7.1.0-00 (Linux(SLES Hitachi Tiered Storage Manager Software 7.1.0-00 (Linux(RHEL Hitachi Tiered Storage Manager Software 7.0.1-02 (Windows) Hitachi Tiered Storage Manager Software 7.0.1-02 (linux(SLES Hitachi Tiered Storage Manager Software 7.0.1-02 (linux(RHEL Hitachi Tiered Storage Manager Software 7.0.0-00 (Windows) Hitachi Tiered Storage Manager Software 7.0.0-00 (Solaris(SP Hitachi Tiered Storage Manager Software 7.0.0-00 (linux(SLES Hitachi Tiered Storage Manager Software 7.0.0-00 (linux(RHEL Hitachi Tiered Storage Manager Software 6.4.0-08 (Windows) Hitachi Tiered Storage Manager Software 6.4.0-08 (Solaris(SP Hitachi Tiered Storage Manager Software 6.4.0-08 (Linux(SLES Hitachi Tiered Storage Manager Software 6.4.0-08 (Linux(RHEL Hitachi Tiered Storage Manager Software 6.4.0-07 (Windows) Hitachi Tiered Storage Manager Software 6.4.0-07 (Solaris(SP Hitachi Tiered Storage Manager Software 6.4.0-07 (linux(SLES Hitachi Tiered Storage Manager Software 6.4.0-07 (linux(RHEL Hitachi Tiered Storage Manager Software 6.3.0-00 (linux(SLES Hitachi Tiered Storage Manager Software 6.2.0-00 (Linux(RHEL Hitachi Tiered Storage Manager Software 6.0.0-00 (Windows) Hitachi Tiered Storage Manager Software 6.0.0-00 (Solaris(SP Hitachi Tiered Storage Manager Software 0 Hitachi Raplication Manager Software 8.0.0-05 (Linux(RHEL Hitachi Raplication Manager Software 8.0.0-00 (Linux(SuSE Hitachi Raplication Manager Software 8.0.0-00 (Linux(RHEL Hitachi Raplication Manager Software 7.6.1-05 (Windows) Hitachi Raplication Manager Software 7.6.1-05 (Solaris(x6 Hitachi Raplication Manager Software 7.6.1-05 (Solaris(SP Hitachi Raplication Manager Software 7.6.1-05 (Linux(RHEL Hitachi JP1/Performance Management - Web Console 10-00-03 (Windows) Hitachi JP1/Performance Management - Web Console 10-00-03 (Solaris) Hitachi JP1/Performance Management - Web Console 10-00-03 (Linux) Hitachi JP1/Performance Management - Web Console 10-00-03 (HP-UX) Hitachi JP1/Performance Management - Web Console 10-00-03 (AIX) Hitachi JP1/Performance Management - Web Console 10-00-00 (Windows) Hitachi JP1/Performance Management - Web Console 10-00-00 (Solaris) Hitachi JP1/Performance Management - Web Console 10-00-00 (Linux) Hitachi JP1/Performance Management - Web Console 10-00-00 (HP-UX) Hitachi JP1/Performance Management - Web Console 10-00-00 (AIX) Hitachi JP1/Performance Management - Web Console 09-50-03 (Windows) Hitachi JP1/Performance Management - Web Console 09-50-03 (Solaris) Hitachi JP1/Performance Management - Web Console 09-50-03 (Linux) Hitachi JP1/Performance Management - Web Console 09-50-03 (HP-UX) Hitachi JP1/Performance Management - Web Console 09-50-03 (AIX) Hitachi JP1/Performance Management - Web Console 09-50-00 (Windows) Hitachi JP1/Performance Management - Web Console 09-50-00 (Solaris) Hitachi JP1/Performance Management - Web Console 09-50-00 (Linux) Hitachi JP1/Performance Management - Web Console 09-50-00 (HP-UX) Hitachi JP1/Performance Management - Web Console 09-50-00 (AIX) Hitachi JP1/Performance Management - Web Console 09-10-10 (Windows) Hitachi JP1/Performance Management - Web Console 09-10-10 (Solaris) Hitachi JP1/Performance Management - Web Console 09-10-10 (Linux) Hitachi JP1/Performance Management - Web Console 09-10-10 (HP-UX) Hitachi JP1/Performance Management - Web Console 09-10-10 (AIX) Hitachi JP1/Performance Management - Web Console 09-10-03 Hitachi JP1/Performance Management - Web Console 09-10-00 (Windows) Hitachi JP1/Performance Management - Web Console 09-10-00 (Solaris) Hitachi JP1/Performance Management - Web Console 09-10-00 (Linux) Hitachi JP1/Performance Management - Web Console 09-10-00 (HP-UX) Hitachi JP1/Performance Management - Web Console 09-10-00 (AIX) Hitachi JP1/Performance Management - Web Console 09-10 Hitachi JP1/Performance Management - Web Console 09-00-12 (Windows) Hitachi JP1/Performance Management - Web Console 09-00-12 (Solaris) Hitachi JP1/Performance Management - Web Console 09-00-12 (Linux) Hitachi JP1/Performance Management - Web Console 09-00-12 (HP-UX) Hitachi JP1/Performance Management - Web Console 09-00-12 (AIX) Hitachi JP1/Performance Management - Web Console 09-00-08 Hitachi JP1/Performance Management - Web Console 09-00-07 Hitachi JP1/Performance Management - Web Console 09-00-02 Hitachi JP1/Performance Management - Web Console 09-00-01 Hitachi JP1/Performance Management - Web Console 09-00-00 (Windows) Hitachi JP1/Performance Management - Web Console 09-00-00 (Solaris) Hitachi JP1/Performance Management - Web Console 09-00-00 (Linux) Hitachi JP1/Performance Management - Web Console 09-00-00 (HP-UX) Hitachi JP1/Performance Management - Web Console 09-00-00 (AIX) Hitachi JP1/Performance Management - Web Console 09-00-00 Hitachi JP1/Performance Management - Web Console 09-00 Hitachi JP1/Performance Management - Web Console 08-50-13 (Windows) Hitachi JP1/Performance Management - Web Console 08-50-13 (Solaris) Hitachi JP1/Performance Management - Web Console 08-50-13 (Linux) Hitachi JP1/Performance Management - Web Console 08-50-13 (HP-UX) Hitachi JP1/Performance Management - Web Console 08-50-13 (AIX) Hitachi JP1/Performance Management - Web Console 08-50-09 Hitachi JP1/Performance Management - Web Console 08-50-00 (Windows) Hitachi JP1/Performance Management - Web Console 08-50-00 (Solaris) Hitachi JP1/Performance Management - Web Console 08-50-00 (Linux) Hitachi JP1/Performance Management - Web Console 08-50-00 (HP-UX) Hitachi JP1/Performance Management - Web Console 08-50-00 (AIX) Hitachi JP1/Performance Management - Web Console 08-50 Hitachi JP1/Performance Management - Web Console 08-11-08 (Windows) Hitachi JP1/Performance Management - Web Console 08-11-08 (Linux) Hitachi JP1/Performance Management - Web Console 08-11-07 Hitachi JP1/Performance Management - Web Console 08-11-01 Hitachi JP1/Performance Management - Web Console 08-11-00 (Windows) Hitachi JP1/Performance Management - Web Console 08-11-00 (Linux) Hitachi JP1/Performance Management - Web Console 08-11-00 Hitachi JP1/Performance Management - Web Console 08-11 Hitachi JP1/Performance Management - Web Console 08-10-08 (Windows) Hitachi JP1/Performance Management - Web Console 08-10-08 (Linux) Hitachi JP1/Performance Management - Web Console 08-10-07 Hitachi JP1/Performance Management - Web Console 08-10-00 (Windows) Hitachi JP1/Performance Management - Web Console 08-10-00 (Linux) Hitachi JP1/Performance Management - Web Console 08-10 Hitachi JP1/Performance Management - Web Console 08-00-12 (Windows) Hitachi JP1/Performance Management - Web Console 08-00-12 (Linux) Hitachi JP1/Performance Management - Web Console 08-00-11 Hitachi JP1/Performance Management - Web Console 08-00-03 Hitachi JP1/Performance Management - Web Console 08-00-02 Hitachi JP1/Performance Management - Web Console 08-00-00 (Windows) Hitachi JP1/Performance Management - Web Console 08-00-00 (Linux) Hitachi JP1/Performance Management - Web Console 08-00-00 Hitachi JP1/Performance Management - Web Console 08-00 Hitachi JP1/Performance Management - Web Console 0 Hitachi JP1/Performance Management - Manager Web Option 07-54 (Windows) Hitachi JP1/Performance Management - Manager Web Option 07-54 (Solaris) Hitachi JP1/Performance Management - Manager Web Option 07-00 (Windows) Hitachi JP1/Performance Management - Manager Web Option 07-00 (Solaris) Hitachi Job Management Partner 1/Performance Management - Web Console 0 Hitachi Global Link Manager Software 6.6 -00 (Windows) Hitachi Global Link Manager Software 6.5 -00 (Windows) Hitachi Global Link Manager Software 6.2 -01 (Windows) Hitachi Global Link Manager Software 6.2 -00 (Windows) Hitachi Global Link Manager Software 6.1 -01 (Windows) Hitachi Global Link Manager Software 6.1 -00 (Windows) Hitachi Global Link Manager Software 8.0.0-00 (Windows) Hitachi Global Link Manager Software 8.0.0-00 (Linux(SuSE Hitachi Global Link Manager Software 8.0.0-00 (Linux(RHEL Hitachi Global Link Manager Software 7.6.1-01 (Windows) Hitachi Global Link Manager Software 7.6.1-01 (Solaris(x6 Hitachi Global Link Manager Software 7.6.1-01 (Solaris(SP Hitachi Global Link Manager Software 7.6.1-01 (Linux(RHEL Hitachi Device Manager Software 7.4 -00 (Windows) Hitachi Device Manager Software 7.4 -00 (Solaris(SPARC)) Hitachi Device Manager Software 7.4 -00 (Linux(SLES)) Hitachi Device Manager Software 7.4 -00 (Linux(RHEL)) Hitachi Device Manager Software 7.3 -00(Solaris(x64)) Hitachi Device Manager Software 7.3 -00(Solaris(SPARC)) Hitachi Device Manager Software 7.3 -00(Linux(SLES)) Hitachi Device Manager Software 7.3 -00 (Windows) Hitachi Device Manager Software 7.3 -00 (Linux(RHEL)) Hitachi Device Manager Software 7.0 -00 (Solaris(x64)) Hitachi Device Manager Software 6.2 -02 (Windows) Hitachi Device Manager Software 6.2 -02 (Solaris(x64)) Hitachi Device Manager Software 6.2 -02 (Solaris(SPARC)) Hitachi Device Manager Software 6.2 -02 (Linux) Hitachi Device Manager Software 6.2 -01 (Windows) Hitachi Device Manager Software 6.2 -01 (Solaris(x64)) Hitachi Device Manager Software 6.2 -01 (Solaris(SPARC)) Hitachi Device Manager Software 6.2 -01 (Linux) Hitachi Device Manager Software 6.2 -00 (Windows) Hitachi Device Manager Software 6.2 -00 (Solaris(x64)) Hitachi Device Manager Software 6.2 -00 (Solaris(SPARC)) Hitachi Device Manager Software 6.2 -00 (Solaris (x64)) Hitachi Device Manager Software 6.2 -00 (Linux) Hitachi Device Manager Software 6.1.1 -04 (Windows) Hitachi Device Manager Software 6.1.1 -04 (Solaris(x64)) Hitachi Device Manager Software 6.1.1 -04 (Solaris(SPARC)) Hitachi Device Manager Software 6.1.1 -04 (Solaris (x64)) Hitachi Device Manager Software 6.1.1 -04 (Linux) Hitachi Device Manager Software 6.1.1 -03 (Windows) Hitachi Device Manager Software 6.1.1 -03 (Solaris(SPARC)) Hitachi Device Manager Software 6.1.1 -03 (Solaris (x64)) Hitachi Device Manager Software 6.1.1 -03 (Linux) Hitachi Device Manager Software 6.1.1 -00 (Windows) Hitachi Device Manager Software 6.1.1 -00 (Solaris(x64)) Hitachi Device Manager Software 6.1.1 -00 (Solaris(SPARC)) Hitachi Device Manager Software 6.1.1 -00 (Solaris (x64)) Hitachi Device Manager Software 6.1.1 -00 (Linux) Hitachi Device Manager Software 6.1 -03 (Windows) Hitachi Device Manager Software 6.1 -03 (Solaris(SPARC)) Hitachi Device Manager Software 6.1 -03 (Solaris (x64)) Hitachi Device Manager Software 6.1 -03 (Linux) Hitachi Device Manager Software 6.1 -02 (Windows) Hitachi Device Manager Software 6.1 -02 (Solaris(x64)) Hitachi Device Manager Software 6.1 -02 (Solaris(SPARC)) Hitachi Device Manager Software 6.1 -02 (Solaris (x64)) Hitachi Device Manager Software 6.1 -02 (Linux) Hitachi Device Manager Software 6.1 -00 (Windows) Hitachi Device Manager Software 6.1 -00 (Solaris(x64)) Hitachi Device Manager Software 6.1 -00 (Solaris(SPARC)) Hitachi Device Manager Software 6.1 -00 (Solaris (x64)) Hitachi Device Manager Software 6.1 -00 (Linux) Hitachi Device Manager Software 6.0 -06 (Windows) Hitachi Device Manager Software 6.0 -06 (Solaris(SPARC)) Hitachi Device Manager Software 6.0 -06 (Solaris (x64)) Hitachi Device Manager Software 6.0 -06 (Linux) Hitachi Device Manager Software 6.0 -00 (Windows) Hitachi Device Manager Software 6.0 -00 (Solaris(SPARC)) Hitachi Device Manager Software 6.0 -00 (Solaris (x64)) Hitachi Device Manager Software 6.0 -00 (Linux) Hitachi Device Manager Software 8.0.0-05 (Windows) Hitachi Device Manager Software 8.0.0-05 (Linux(SuSE Hitachi Device Manager Software 8.0.0-05 (Linux(RHEL Hitachi Device Manager Software 8.0.0-00 (Windows) Hitachi Device Manager Software 8.0.0-00 (Linux(SuSE Hitachi Device Manager Software 8.0.0-00 (Linux(RHEL Hitachi Device Manager Software 7.6.1-05 (Windows) Hitachi Device Manager Software 7.6.1-05 (Solaris(x6 Hitachi Device Manager Software 7.6.1-05 (Solaris(SP Hitachi Device Manager Software 7.6.1-05 (Linux(SuSE Hitachi Device Manager Software 7.6.1-05 (Linux(RHEL Hitachi Device Manager Software 7.5.0-02 Hitachi Device Manager Software 7.4.0-00 (Solaris(Op Hitachi Device Manager Software 7.3.1 (windows) Hitachi Device Manager Software 7.2.1-01 Hitachi Device Manager Software 7.2.1-00 Hitachi Device Manager Software 7.1.0-00 (Windows) Hitachi Device Manager Software 7.1.0-00 (Solaris(SP Hitachi Device Manager Software 7.1.0-00 (Linux(SLES Hitachi Device Manager Software 7.1.0-00 (Linux(RHEL Hitachi Device Manager Software 7.0.1-02 (Windows) Hitachi Device Manager Software 7.0.1-02 (linux(SLES Hitachi Device Manager Software 7.0.1-02 (linux(RHEL Hitachi Device Manager Software 7.0.0-00 (Windows) Hitachi Device Manager Software 7.0.0-00 (Solaris(SP Hitachi Device Manager Software 7.0.0-00 (linux(SLES Hitachi Device Manager Software 7.0.0-00 (linux(RHEL Hitachi Device Manager Software 7.0.0-00 Hitachi Device Manager Software 6.4.0-08 (Windows) Hitachi Device Manager Software 6.4.0-08 (Solaris(SP Hitachi Device Manager Software 6.4.0-08 (Linux(SLES Hitachi Device Manager Software 6.4.0-08 (Linux(RHEL Hitachi Device Manager Software 6.4.0-07 (Windows) Hitachi Device Manager Software 6.4.0-07 (Solaris(SP Hitachi Device Manager Software 6.4.0-07 (linux(SLES Hitachi Device Manager Software 6.4.0-07 (linux(RHEL Hitachi Device Manager Software 6.3.0-00 (linux(SLES F5 BIG-IP WebAccelerator 11.2.0 0 F5 BIG-IP WebAccelerator 11.3 F5 BIG-IP WebAccelerator 11.2.1 HF3 F5 BIG-IP WebAccelerator 11.2.1 F5 BIG-IP WebAccelerator 11.2 HF3 F5 BIG-IP WebAccelerator 11.1 F5 BIG-IP WebAccelerator 11.0 F5 BIG-IP WebAccelerator 10.2.4 F5 BIG-IP WebAccelerator 10.2.1 F5 BIG-IP WebAccelerator 10.0 F5 BIG-IP WebAccelerator 11.2.1 HF5 F5 BIG-IP WebAccelerator 11.2.0 HF5 F5 BIG-IP WebAccelerator 11.1.0 HF7 F5 BIG-IP WebAccelerator 10.2.1 HF1 F5 BIG-IP Edge Gateway 11.3 F5 BIG-IP Edge Gateway 11.2.1 HF3 F5 BIG-IP Edge Gateway 11.2.1 F5 BIG-IP Edge Gateway 11.2 HF3 F5 BIG-IP Edge Gateway 11.2 F5 BIG-IP Edge Gateway 11.1 F5 BIG-IP Edge Gateway 11.0 F5 BIG-IP Edge Gateway 10.2.4 F5 BIG-IP Edge Gateway 10.2.2 F5 BIG-IP Edge Gateway 10.2.1 F5 BIG-IP Edge Gateway 11.2.1 HF5 F5 BIG-IP Edge Gateway 11.2.1 HF2 F5 BIG-IP Edge Gateway 11.2.0 HF5 F5 BIG-IP Edge Gateway 11.1.0 HF7 F5 BIG-IP Edge Gateway 10.2.1 HF1 F5 BIG-IP Edge Gateway 10.1 F5 BIG-IP AAM 11.5.1 F5 BIG-IP AAM 11.5 F5 BIG-IP AAM 11.4.1 F5 BIG-IP AAM 11.4.0 F5 ARX 6.4 F5 ARX 6.3 F5 ARX 6.2 F5 ARX 6.1.1 F5 ARX 6.1 F5 ARX 6.0 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 CentOS CentOS 5 Apache Struts 1.3.10 Apache Struts 1.3.8 Apache Struts 1.3.5 Apache Struts 1.2.9 Apache Struts 1.2.8 Apache Struts 1.2.7 Apache Struts 1.2.4 Apache Struts 1.1 Apache Struts 1.0.2 Apache Struts 1.2.6 Apache Struts 1.2.2
Not Vulnerable:	VMWare vCenter Server 5.5 Update 2 NTT DATA Corporation TERASOLUNA Server Framework for Java 2.0.5.2 Juniper Security Threat Response Manager 2013.2R8 Juniper Security Threat Response Manager 2012.1R7 Juniper Secure Analytics 2014.2R2 Juniper Secure Analytics 2013.2R8 Juniper Secure Analytics 2012.1R7 HP SiteScope 11.24.271 HP SiteScope 11.13 Hitachi Tuning Manager Software 8.0.0-06 (Windows) Hitachi Tuning Manager Software 8.0.0-06 (Linux(SuSE Hitachi Tuning Manager Software 8.0.0-06 (Linux(RHEL Hitachi Tiered Storage Manager Software 8.0.0-06 (Windows) Hitachi Tiered Storage Manager Software 8.0.0-06 (Linux(SuSE Hitachi Tiered Storage Manager Software 8.0.0-06 (Linux(RHEL Hitachi Raplication Manager Software 8.0.0-06 (Linux(SuSE Hitachi Raplication Manager Software 8.0.0-06 (Linux(RHEL Hitachi Global Link Manager Software 8.0.0-01 (Linux(SuSE Hitachi Global Link Manager Software 8.0.0-01 (Linux(RHEL Hitachi Device Manager Software 8.0.0-06 (Windows) Hitachi Device Manager Software 8.0.0-06 (Linux(SuSE Hitachi Device Manager Software 8.0.0-06 (Linux(RHEL Apache Struts 2.3.16.2

Apache Struts ClassLoader Manipulation CVE-2014-0114 Security Bypass Vulnerability

Apache Struts is prone to a security-bypass vulnerability because it fails to adequately handle user-supplied input.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks.

Apache Struts versions 1.0.0 through 1.3.10 are vulnerable.

Apache Struts ClassLoader Manipulation CVE-2014-0114 Security Bypass Vulnerability

Attackers can use readily available tools to exploit this issue.

Apache Struts ClassLoader Manipulation CVE-2014-0114 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache Struts ClassLoader Manipulation CVE-2014-0114 Security Bypass Vulnerability

References:

• CST-SA: LPS-46552 - Struts 1 Classloader manipulation (Liferay)
  
• Juniper Secure Analytics (JSA)/Security Threat Response Manager (STRM): Multiple (Juniper)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts (CVE-2014-0114) a (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting Financi (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting IBM QRa (IBM)
  
• Struts Homepage (Apache Software Foundation)
  
• VMware vSphere product updates to third party libraries (VMware)
  
• HPSBGN03041 rev.1 - HP IceWall Configuration Manager running Apache Struts, Rem (HP)
  
• A security issue exists in the Verity dashboard that is installed with IBM FileN (IBM)
  
• An Apache Struts security vulnerability affects the Tivoli Integrated Portal com (IBM)
  
• Class loader manipulation vulnerability in IBM WebSphere Application Server that (IBM)
  
• ClassLoader Manipulation Vulnerability in Hitachi Command Suite Products (Hitachi)
  
• Classloader Manipulation Vulnerability in IBM WebSphere Application Server CVE-2 (IBM)
  
• Classloader Manipulation Vulnerability in Lotus Quickr 8.5 for WebSphere Portal (IBM)
  
• ClassLoader manipulation with Apache Struts affecting IBM Endpoint Manager for R (IBM)
  
• ClassLoader manipulation with Apache Struts affecting IBM Tivoli Netcool Configu (IBM)
  
• ClassLoader manipulation with Apache Struts affecting Tivoli Endpoint Manager (IBM)
  
• Critical Patch Security Advisory - October 2016 (Oracle)
  
• Fuse ESB Enterprise 7.1.0 security update (Red Hat)
  
• HP SiteScope, running Apache Struts, Remote Execution of Arbitrary Code (HP)
  
• HP XP Command View Advanced Edition running Apache Struts, Remote Execution of A (HP )
  
• HPSBGN03669 rev.1 - HPE SiteScope, Local Elevation of Privilege, Remote Denial o (IBM)
  
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV61061 (IBM)
  
• IBM Connections Security Refresh (CVE-2014-0114, CVE-2014-0113, CVE-2014-0112, C (IBM)
  
• IBM Tivoli Netcool Configuration Manager, WebSphere Application Server affected (IBM)
  
• Improves excluded params in ParametersInterceptor and CookieInterceptor to avoid (Apache Software Foundation)
  
• Interim Fix 01 - For QRadar 7.0 Maintenance Release 5 Patch 8 (7.0.0.770359) (IBM)
  
• Interim Fix 01 - For QRadar 7.1 Maintenance Release 2 Patch 6 (7.1.0.809045). (IBM)
  
• Interim Fix 01 - For QRadar 7.2.2 Patch 2 (7.2.2.839412) (IBM)
  
• IV61039: APACHE STRUTS 1.X ZERO DAY VULNERABILITY CVE-2014-0114 (IBM)
  
• IV61058: APACHE STRUTS 1.X ZERO DAY VULNERABILITY CVE-2014-0114 (IBM)
  
• lassloader Manipulation Vulnerability in IBM WebSphere Application Server for Co (IBM)
  
• Multiple security vulnerabilities in IBM Content Analytics with Enterprise Searc (IBM)
  
• Multiple Vulnerabilities in JP1/Performance Management - Web Console, and JP1/Pe (Hitachi)
  
• OpenPages GRC Platform 6.1.0.1 Interim Fix 4 (IBM)
  
• OpenPages GRC Platform 6.2.1 Fix Pack 1 (IBM)
  
• Oracle Critical Patch Update Advisory - April 2017 (Oracle)
  
• Oracle Critical Patch Update Advisory - April 2019 (Oracle)
  
• Oracle Critical Patch Update Advisory - January 2015 Oracle Advisory (Oracle)
  
• Oracle Critical Patch Update Advisory - July 2014 (Oracle)
  
• Oracle Critical Patch Update Advisory - July 2019 (Oracle)
  
• Oracle Critical Patch Update Advisory - October 2014 (Oracle)
  
• Oracle Critical Patch Update Advisory - October 2017 (Oracle)
  
• PI17190: Classloader Manipulation Vulnerability in IBM WebSphere Application Ser (IBM)
  
• Red Hat JBoss Fuse 6.1.0 security update (Red Hat)
  
• Security Advisory Important: Red Hat JBoss Fuse 6.1.0 security update (Red Hat)
  
• Security Advisory Important: struts security update (Red Hat)
  
• Security Bulletin: A Security vulnerability has been discovered in Apache Struts (IBM)
  
• Security Bulletin: A security vulnerability has been identified in IBM WebSphere (IBM)
  
• Security Bulletin: A security vulnerability has been identified in IBM WebSphere (IBM)
  
• Security Bulletin: A security vulnerability has been identified in IBM WebSphere (IBM)
  
• Security Bulletin: A security vulnerability has been identified in IBM WebSphere (IBM)
  
• Security Bulletin: A security vulnerability has been identified in IBM WebSphere (IBM)
  
• Security Bulletin: A security vulnerability has been identified in IBM WebSphere (IBM)
  
• Security Bulletin: A security vulnerability has been identified in IBM WebSphere (IBM)
  
• Security Bulletin: A security vulnerability has been identified in IBM WebSphere (IBM)
  
• Security Bulletin: Classloader Manipulation Vulnerability in IBM WebSphere Appli (IBM)
  
• Security Bulletin: Classloader Manipulation Vulnerability in IBM WebSphere Servi (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts (CVE-2014-0114) a (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting IBM Cam (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting IBM Rec (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting IBM Tiv (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting InfoSph (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting Lotus E (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting Rationa (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting Tivoli (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting Tivoli (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting Tivoli (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting Tivoli (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting WebSphe (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting WebSphe (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts affecting WebSphe (IBM)
  
• Security Bulletin: ClassLoader manipulation with Apache Struts in WebSphere Appl (IBM)
  
• Security Bulletin: IBM OpenPages GRC Platform Apache Struts V1 ClassLoader vulne (IBM)
  
• Security Bulletin: IBM Security SiteProtector System can be affected by a vulner (IBM)
  
• Security Bulletin: IBM Tivoli Netcool Configuration Manager, Tivoli Integrated P (IBM)
  
• Security Bulletin: Multiple IBM InfoSphere Information Server components are vul (IBM)
  
• Security Bulletin: One vulnerability in IBM FileNet Content Manager, IBM Content (IBM)
  
• Security Bulletin: Open Source Apache Struts V1 ClassLoader manipulation vulnera (IBM)
  
• Security Bulletin: Open Source Apache Struts V1 ClassLoader manipulation vulnera (IBM)
  
• Security Bulletin: Open Source Apache Struts V1 ClassLoader manipulation vulnera (IBM)
  
• Security Bulletin: Potential Security Vulnerabilities fixed in IBM WebSphere App (IBM)
  
• Security Bulletin: Rational Insight - Apache Struts used by WebSphere Applicatio (IBM)
  
• Security Bulletin: Rational Reporting for Development Intelligence - Apache Stru (IBM)
  
• Security Bulletin: Security exposures in IBM Social Media Analytics and IBM Soci (IBM)
  
• Security Bulletin: TADDM - Struts V1 ClassLoader manipulation vulnerability (CVE (IBM)
  
• Security Bulletin: TFAM / IAMSB can be affected by ClassLoader manipulation with (IBM)
  
• Security Bulletin:ClassLoader manipulation with Apache Struts affecting IBM Tivo (IBM)
  
• Social Media Analytics 1.3 Interim Fix 3 (IBM)
  
• sol15282: Apache Struts vulnerability CVE-2014-0114 (F5 Networks)
  
• swg21680194: ClassLoader Manipulation with Apache Struts affecting IBM WebSphere (IBM)
  
• TERASOLUNA Server Framework for Java(Web) vulnerable to ClassLoader manipulation (JPCERT)
  
• Tivoli Workload Scheduler Distributed Potential multiple Security vulnerabilitie (IBM)
  
• WebSphere Sensor Events 7.0 - IT02025: Classloader Manipulation Vulnerability CV (IBM)