Vulnerability-Lookup

RHSA-2014:0474

Vulnerability from csaf_redhat - Published: 2014-05-07 04:56 - Updated: 2026-10-12 14:00

Summary

Red Hat Security Advisory: struts security update

Severity

Important

Notes

Topic: Updated struts packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Details: Apache Struts is a framework for building web applications with Java. It was found that the Struts 1 ActionForm object allowed access to the 'class' parameter, which is directly mapped to the getClass() method. A remote attacker could use this flaw to manipulate the ClassLoader used by an application server running Struts 1. This could lead to remote code execution under certain conditions. (CVE-2014-0114) All struts users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. All running applications using struts must be restarted for this update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2014-0114

Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.

7.5 ()


                
                  AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Affected products

Fixed 37 products

Product	Version	Remediation
Unresolved product id: 5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386	—	Vendor Fix fix Workaround
Unresolved product id: 5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src	—	Vendor Fix fix Workaround
Unresolved product id: 5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386	—	Vendor Fix fix Workaround
Unresolved product id: 5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386	—	Vendor Fix fix Workaround
Unresolved product id: 5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386	—	Vendor Fix fix Workaround
Unresolved product id: 5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386	—	Vendor Fix fix Workaround
Unresolved product id: 5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ia64	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ppc	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ia64	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ppc	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

8 references

URL	Category
https://access.redhat.com/errata/RHSA-2014:0474	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1091938	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2014-0114	self
https://bugzilla.redhat.com/show_bug.cgi?id=1091938	external
https://www.cve.org/CVERecord?id=CVE-2014-0114	external
https://nvd.nist.gov/vuln/detail/CVE-2014-0114	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated struts packages that fix one security issue are now available for\nRed Hat Enterprise Linux 5.\n\nThe Red Hat Security Response Team has rated this update as having\nImportant security impact. A Common Vulnerability Scoring System (CVSS)\nbase score, which gives a detailed severity rating, is available from the\nCVE link in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Apache Struts is a framework for building web applications with Java.\n\nIt was found that the Struts 1 ActionForm object allowed access to the\n\u0027class\u0027 parameter, which is directly mapped to the getClass() method. A\nremote attacker could use this flaw to manipulate the ClassLoader used by\nan application server running Struts 1. This could lead to remote code\nexecution under certain conditions. (CVE-2014-0114)\n\nAll struts users are advised to upgrade to these updated packages, which\ncontain a backported patch to correct this issue. All running applications\nusing struts must be restarted for this update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2014:0474",
        "url": "https://access.redhat.com/errata/RHSA-2014:0474"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1091938",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091938"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0474.json"
      }
    ],
    "title": "Red Hat Security Advisory: struts security update",
    "tracking": {
      "current_release_date": "2026-10-12T14:00:51+00:00",
      "generator": {
        "date": "2026-10-12T14:00:51+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2014:0474",
      "initial_release_date": "2014-05-07T04:56:26+00:00",
      "revision_history": [
        {
          "date": "2014-05-07T04:56:26+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2014-05-07T04:56:26+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-12T14:00:51+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
                  "product_id": "5Client-Workstation-5.10.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::client_workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux (v. 5 server)",
                "product": {
                  "name": "Red Hat Enterprise Linux (v. 5 server)",
                  "product_id": "5Server-5.10.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:5::server"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
                "product": {
                  "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
                  "product_id": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-debuginfo@1.2.9-4jpp.8.el5_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64",
                "product": {
                  "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64",
                  "product_id": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-webapps-tomcat5@1.2.9-4jpp.8.el5_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
                "product": {
                  "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
                  "product_id": "struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-manual@1.2.9-4jpp.8.el5_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
                "product": {
                  "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
                  "product_id": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-javadoc@1.2.9-4jpp.8.el5_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-0:1.2.9-4jpp.8.el5_10.x86_64",
                "product": {
                  "name": "struts-0:1.2.9-4jpp.8.el5_10.x86_64",
                  "product_id": "struts-0:1.2.9-4jpp.8.el5_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts@1.2.9-4jpp.8.el5_10?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x",
                "product": {
                  "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x",
                  "product_id": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-debuginfo@1.2.9-4jpp.8.el5_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x",
                "product": {
                  "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x",
                  "product_id": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-webapps-tomcat5@1.2.9-4jpp.8.el5_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.s390x",
                "product": {
                  "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.s390x",
                  "product_id": "struts-manual-0:1.2.9-4jpp.8.el5_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-manual@1.2.9-4jpp.8.el5_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x",
                "product": {
                  "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x",
                  "product_id": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-javadoc@1.2.9-4jpp.8.el5_10?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-0:1.2.9-4jpp.8.el5_10.s390x",
                "product": {
                  "name": "struts-0:1.2.9-4jpp.8.el5_10.s390x",
                  "product_id": "struts-0:1.2.9-4jpp.8.el5_10.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts@1.2.9-4jpp.8.el5_10?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64",
                "product": {
                  "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64",
                  "product_id": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-debuginfo@1.2.9-4jpp.8.el5_10?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64",
                "product": {
                  "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64",
                  "product_id": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-webapps-tomcat5@1.2.9-4jpp.8.el5_10?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.ia64",
                "product": {
                  "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.ia64",
                  "product_id": "struts-manual-0:1.2.9-4jpp.8.el5_10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-manual@1.2.9-4jpp.8.el5_10?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64",
                "product": {
                  "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64",
                  "product_id": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-javadoc@1.2.9-4jpp.8.el5_10?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-0:1.2.9-4jpp.8.el5_10.ia64",
                "product": {
                  "name": "struts-0:1.2.9-4jpp.8.el5_10.ia64",
                  "product_id": "struts-0:1.2.9-4jpp.8.el5_10.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts@1.2.9-4jpp.8.el5_10?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
                "product": {
                  "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
                  "product_id": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-debuginfo@1.2.9-4jpp.8.el5_10?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
                "product": {
                  "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
                  "product_id": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-webapps-tomcat5@1.2.9-4jpp.8.el5_10?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
                "product": {
                  "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
                  "product_id": "struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-manual@1.2.9-4jpp.8.el5_10?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
                "product": {
                  "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
                  "product_id": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-javadoc@1.2.9-4jpp.8.el5_10?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-0:1.2.9-4jpp.8.el5_10.i386",
                "product": {
                  "name": "struts-0:1.2.9-4jpp.8.el5_10.i386",
                  "product_id": "struts-0:1.2.9-4jpp.8.el5_10.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts@1.2.9-4jpp.8.el5_10?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc",
                "product": {
                  "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc",
                  "product_id": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-debuginfo@1.2.9-4jpp.8.el5_10?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc",
                "product": {
                  "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc",
                  "product_id": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-webapps-tomcat5@1.2.9-4jpp.8.el5_10?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.ppc",
                "product": {
                  "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.ppc",
                  "product_id": "struts-manual-0:1.2.9-4jpp.8.el5_10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-manual@1.2.9-4jpp.8.el5_10?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc",
                "product": {
                  "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc",
                  "product_id": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts-javadoc@1.2.9-4jpp.8.el5_10?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "struts-0:1.2.9-4jpp.8.el5_10.ppc",
                "product": {
                  "name": "struts-0:1.2.9-4jpp.8.el5_10.ppc",
                  "product_id": "struts-0:1.2.9-4jpp.8.el5_10.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts@1.2.9-4jpp.8.el5_10?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "struts-0:1.2.9-4jpp.8.el5_10.src",
                "product": {
                  "name": "struts-0:1.2.9-4jpp.8.el5_10.src",
                  "product_id": "struts-0:1.2.9-4jpp.8.el5_10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/struts@1.2.9-4jpp.8.el5_10?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-0:1.2.9-4jpp.8.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386"
        },
        "product_reference": "struts-0:1.2.9-4jpp.8.el5_10.i386",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-0:1.2.9-4jpp.8.el5_10.src as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src"
        },
        "product_reference": "struts-0:1.2.9-4jpp.8.el5_10.src",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-0:1.2.9-4jpp.8.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64"
        },
        "product_reference": "struts-0:1.2.9-4jpp.8.el5_10.x86_64",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386"
        },
        "product_reference": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64"
        },
        "product_reference": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386"
        },
        "product_reference": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64"
        },
        "product_reference": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386"
        },
        "product_reference": "struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64"
        },
        "product_reference": "struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386"
        },
        "product_reference": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64 as a component of Red Hat Enterprise Linux Desktop Workstation (v. 5 client)",
          "product_id": "5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64"
        },
        "product_reference": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64",
        "relates_to_product_reference": "5Client-Workstation-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-0:1.2.9-4jpp.8.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386"
        },
        "product_reference": "struts-0:1.2.9-4jpp.8.el5_10.i386",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-0:1.2.9-4jpp.8.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ia64"
        },
        "product_reference": "struts-0:1.2.9-4jpp.8.el5_10.ia64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-0:1.2.9-4jpp.8.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ppc"
        },
        "product_reference": "struts-0:1.2.9-4jpp.8.el5_10.ppc",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-0:1.2.9-4jpp.8.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.s390x"
        },
        "product_reference": "struts-0:1.2.9-4jpp.8.el5_10.s390x",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-0:1.2.9-4jpp.8.el5_10.src as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src"
        },
        "product_reference": "struts-0:1.2.9-4jpp.8.el5_10.src",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-0:1.2.9-4jpp.8.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64"
        },
        "product_reference": "struts-0:1.2.9-4jpp.8.el5_10.x86_64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386"
        },
        "product_reference": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64"
        },
        "product_reference": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc"
        },
        "product_reference": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x"
        },
        "product_reference": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64"
        },
        "product_reference": "struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386"
        },
        "product_reference": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64"
        },
        "product_reference": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc"
        },
        "product_reference": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x"
        },
        "product_reference": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64"
        },
        "product_reference": "struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386"
        },
        "product_reference": "struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ia64"
        },
        "product_reference": "struts-manual-0:1.2.9-4jpp.8.el5_10.ia64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ppc"
        },
        "product_reference": "struts-manual-0:1.2.9-4jpp.8.el5_10.ppc",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.s390x"
        },
        "product_reference": "struts-manual-0:1.2.9-4jpp.8.el5_10.s390x",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64"
        },
        "product_reference": "struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386"
        },
        "product_reference": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64"
        },
        "product_reference": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc"
        },
        "product_reference": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x"
        },
        "product_reference": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x",
        "relates_to_product_reference": "5Server-5.10.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64 as a component of Red Hat Enterprise Linux (v. 5 server)",
          "product_id": "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64"
        },
        "product_reference": "struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64",
        "relates_to_product_reference": "5Server-5.10.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-0114",
      "cwe": {
        "id": "CWE-470",
        "name": "Use of Externally-Controlled Input to Select Classes or Code (\u0027Unsafe Reflection\u0027)"
      },
      "discovery_date": "2014-04-28T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1091938"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to \"manipulate\" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "1: Class Loader manipulation via request parameters",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw allows attackers to manipulate ClassLoader properties on a vulnerable server. The impact of this depends on which ClassLoader properties are exposed. Exploits that lead to remote code execution have been published. These exploits rely on ClassLoader properties that are exposed on Tomcat 8, which is not included in any supported Red Hat products. However, some Red Hat products that ship Struts 1 do expose ClassLoader properties that could potentially be exploited. Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/site/solutions/869353",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386",
          "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src",
          "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64",
          "5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
          "5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
          "5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
          "5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
          "5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
          "5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
          "5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
          "5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64",
          "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386",
          "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ia64",
          "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ppc",
          "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.s390x",
          "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src",
          "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64",
          "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
          "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64",
          "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc",
          "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x",
          "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
          "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
          "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64",
          "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc",
          "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x",
          "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
          "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
          "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ia64",
          "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ppc",
          "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.s390x",
          "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
          "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
          "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64",
          "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc",
          "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x",
          "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-0114"
        },
        {
          "category": "external",
          "summary": "RHBZ#1091938",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091938"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2014-0114",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-0114"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2014-0114",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-0114"
        }
      ],
      "release_date": "2014-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2014-05-07T04:56:26+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/site/articles/11258",
          "product_ids": [
            "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src",
            "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2014:0474"
        },
        {
          "category": "workaround",
          "details": "http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Protect-your-Struts1-applications/ba-p/6463188#.VCaGk3V53Ua",
          "product_ids": [
            "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src",
            "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src",
            "5Client-Workstation-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
            "5Client-Workstation-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.src",
            "5Server-5.10.Z:struts-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-debuginfo-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-javadoc-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-manual-0:1.2.9-4jpp.8.el5_10.x86_64",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.i386",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ia64",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.ppc",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.s390x",
            "5Server-5.10.Z:struts-webapps-tomcat5-0:1.2.9-4jpp.8.el5_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "1: Class Loader manipulation via request parameters"
    }
  ]
}

CVE-2014-0114 (GCVE-0-2014-0114)

Vulnerability from cvelistv5 – Published: 2014-04-30 10:00 – Updated: 2026-10-14 16:20

Summary

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-14 16:20 UTC

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 81/100 over 1018 records in the last 180 days details

References

119 references

URL	Tags
http://apache-ignite-developers.2346864.n4.nabble…	mailing-listx_refsource_MLIST
http://secunia.com/advisories/57477	third-party-advisoryx_refsource_SECUNIA
http://www.vmware.com/security/advisories/VMSA-20…	x_refsource_CONFIRM
https://issues.apache.org/jira/browse/BEANUTILS-463	x_refsource_CONFIRM
http://secunia.com/advisories/58710	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://www.oracle.com/technetwork/security-advis…	x_refsource_CONFIRM
http://www.vmware.com/security/advisories/VMSA-20…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-2014091…	x_refsource_CONFIRM
http://secunia.com/advisories/59464	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59118	third-party-advisoryx_refsource_SECUNIA
https://security.netapp.com/advisory/ntap-2018062…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
https://access.redhat.com/solutions/869353	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1091938	x_refsource_CONFIRM
http://commons.apache.org/proper/commons-beanutil…	x_refsource_CONFIRM
http://advisories.mageia.org/MGASA-2014-0219.html	x_refsource_CONFIRM
http://secunia.com/advisories/60703	third-party-advisoryx_refsource_SECUNIA
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2014/07/08/1	mailing-listx_refsource_MLIST
https://access.redhat.com/errata/RHSA-2018:2669	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201607-09	vendor-advisoryx_refsource_GENTOO
http://marc.info/?l=bugtraq&m=141451023707502&w=2	vendor-advisoryx_refsource_HP
http://www.securityfocus.com/archive/1/534161/100…	mailing-listx_refsource_BUGTRAQ
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://secunia.com/advisories/59228	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59246	third-party-advisoryx_refsource_SECUNIA
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1116665	x_refsource_CONFIRM
http://openwall.com/lists/oss-security/2014/06/15/10	mailing-listx_refsource_MLIST
http://secunia.com/advisories/59245	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=140801096002766&w=2	vendor-advisoryx_refsource_HP
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://secunia.com/advisories/60177	third-party-advisoryx_refsource_SECUNIA
http://seclists.org/fulldisclosure/2014/Dec/23	mailing-listx_refsource_FULLDISC
http://www.oracle.com/technetwork/security-adviso…	x_refsource_CONFIRM
http://www.ibm.com/support/docview.wss?uid=swg21675496	x_refsource_CONFIRM
http://www.debian.org/security/2014/dsa-2940	vendor-advisoryx_refsource_DEBIAN
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://secunia.com/advisories/59014	third-party-advisoryx_refsource_SECUNIA
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://www-01.ibm.com/support/docview.wss?uid=swg…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/67121	vdb-entryx_refsource_BID
http://secunia.com/advisories/59480	third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=140119284401582&w=2	vendor-advisoryx_refsource_HP
http://secunia.com/advisories/59479	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59704	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/58947	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59718	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/59430	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/58851	third-party-advisoryx_refsource_SECUNIA
https://lists.apache.org/thread.html/708d94141126…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/37e1ed724a1b…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/c70da3cb6e3f…	mailing-listx_refsource_MLIST
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC
https://lists.apache.org/thread.html/97fc033dad42…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/8e2bdfabd5b1…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/65b39fa6d700…	x_refsource_MISC
https://lists.apache.org/thread.html/080af531a911…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/ffde3f266d3b…	x_refsource_MISC
https://lists.apache.org/thread.html/40fc236a3580…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/15fcdf27fa06…	x_refsource_MISC
https://lists.apache.org/thread.html/4c3fd707a049…	x_refsource_MISC
https://lists.apache.org/thread.html/0340493a1ddf…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/2ba22f2e3de9…	x_refsource_MISC
https://lists.apache.org/thread.html/31f9dc2c9cb6…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/098e9aae118a…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/fda473f46e51…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/c24c0b931632…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/42ad6326d62e…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/ebc4f019798f…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/df093c662b5e…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/9b5505632f56…	x_refsource_MISC
https://lists.apache.org/thread.html/cee6b1c4533b…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/df1c385f2112…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/2454e058fd05…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/869c08899f34…	x_refsource_MISC
https://lists.apache.org/thread.html/084ae814e691…	x_refsource_MISC
https://www.oracle.com/technetwork/security-advis…	x_refsource_MISC
https://lists.apache.org/thread.html/f3682772e629…	x_refsource_MISC
https://lists.apache.org/thread.html/aa4ca069c7ae…	x_refsource_MISC
https://lists.apache.org/thread.html/88c497eead24…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/0a35108a56e2…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/918ec15a80fc…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/c7e31c3c90b2…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/d27c51b3c933…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/3f500972dceb…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/1565e8b786df…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/956995acee0d…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/1f78f1e32cc5…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/0efed939139f…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/09981ae3df18…	x_refsource_MISC
https://lists.apache.org/thread.html/6b30629b32d0…	x_refsource_MISC
https://lists.apache.org/thread.html/6afe2f935493…	x_refsource_MISC
https://access.redhat.com/errata/RHSA-2019:2995	vendor-advisoryx_refsource_REDHAT
https://lists.apache.org/thread.html/66176fa3caec…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/b0656d359c7d…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/519eb0fd4564…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/f9bc3e55f4e2…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/9317fd092b25…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r75d67108e55…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r204ba2a9ea7…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/rf5230a049d9…	mailing-listx_refsource_MLIST
https://lists.apache.org/thread.html/r458d61eaead…	mailing-listx_refsource_MLIST

Date Public

2014-04-29 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T09:05:38.989Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[apache-ignite-developers] 20180601  [CVE-2014-0114]: Apache Ignite is vulnerable to existing CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2014-0114-Apache-Ignite-is-vulnerable-to-existing-CVE-2014-0114-td31205.html"
          },
          {
            "name": "57477",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/57477"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2014-0008.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.apache.org/jira/browse/BEANUTILS-463"
          },
          {
            "name": "58710",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58710"
          },
          {
            "name": "MDVSA-2014:095",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:095"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675689"
          },
          {
            "name": "FEDORA-2014-9380",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136958.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21674812"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20140911-0001/"
          },
          {
            "name": "59464",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59464"
          },
          {
            "name": "59118",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59118"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20180629-0006/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675387"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/solutions/869353"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091938"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://advisories.mageia.org/MGASA-2014-0219.html"
          },
          {
            "name": "60703",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60703"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675972"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676375"
          },
          {
            "name": "[oss-security] 20140707 Re: CVE request for commons-beanutils: \u0027class\u0027 property is exposed, potentially leading to RCE",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2014/07/08/1"
          },
          {
            "name": "RHSA-2018:2669",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2669"
          },
          {
            "name": "GLSA-201607-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201607-09"
          },
          {
            "name": "HPSBST03160",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=141451023707502\u0026w=2"
          },
          {
            "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675898"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676110"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg27042296"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676303"
          },
          {
            "name": "59228",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59228"
          },
          {
            "name": "59246",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59246"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1116665"
          },
          {
            "name": "[oss-security] 20140616 CVE request for commons-beanutils: \u0027class\u0027 property is exposed, potentially leading to RCE",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://openwall.com/lists/oss-security/2014/06/15/10"
          },
          {
            "name": "59245",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59245"
          },
          {
            "name": "HPSBMU03090",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=140801096002766\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21674128"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676931"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html"
          },
          {
            "name": "60177",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60177"
          },
          {
            "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ibm.com/support/docview.wss?uid=swg21675496"
          },
          {
            "name": "DSA-2940",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-2940"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675266"
          },
          {
            "name": "59014",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59014"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677110"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676091"
          },
          {
            "name": "67121",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/67121"
          },
          {
            "name": "59480",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59480"
          },
          {
            "name": "HPSBGN03041",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=140119284401582\u0026w=2"
          },
          {
            "name": "59479",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59479"
          },
          {
            "name": "59704",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59704"
          },
          {
            "name": "58947",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58947"
          },
          {
            "name": "59718",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59718"
          },
          {
            "name": "59430",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/59430"
          },
          {
            "name": "58851",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/58851"
          },
          {
            "name": "[lucene-solr-user] 20190104 Re: SOLR v7 Security Issues Caused Denial of Use - Sonatype Application Composition Report",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E"
          },
          {
            "name": "[infra-devnull] 20190329 [GitHub] [pulsar] massakam opened pull request #3938: Upgrade third party libraries with security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E"
          },
          {
            "name": "[pulsar-commits] 20190329 [GitHub] [pulsar] massakam opened a new pull request #3938: Upgrade third party libraries with security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
          },
          {
            "name": "[commons-issues] 20190521 [jira] [Created] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/97fc033dad4233a5d82fcb75521eabdd23dd99ef32eb96f407f96a1a%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-issues] 20190522 [jira] [Commented] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/8e2bdfabd5b14836aa3cf900aa0a62ff9f4e22a518bb4e553ebcf55f%40%3Cissues.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/65b39fa6d700e511927e5668a4038127432178a210aff81500eb36e5%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-issues] 20190522 [jira] [Work logged] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/080af531a9113e29d3f6a060e3f992dc9f40315ec7234e15c3b339e3%40%3Cissues.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/ffde3f266d3bde190b54c9202169e7918a92de7e7e0337d792dc7263%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-dev] 20190522 [beanutils2] CVE-2014-0114 Pull Request",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/40fc236a35801a535cd49cf1979dbeab034b833c63a284941bce5bf1%40%3Cdev.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/15fcdf27fa060de276edc0b4098526afc21c236852eb3de9be9594f3%40%3Cissues.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/4c3fd707a049bfe0577dba8fc9c4868ffcdabe68ad86586a0a49242e%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-dev] 20190525 Re: [beanutils2] CVE-2014-0114 Pull Request",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/0340493a1ddf3660dee09a5c503449cdac5bec48cdc478de65858859%40%3Cdev.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/2ba22f2e3de945039db735cf6cbf7f8be901ab2537337c7b1dd6a0f0%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-commits] 20190528 [commons-beanutils] branch master updated: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesBeanIntrospector.SUPPRESS_CLASS by default. (#7)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/31f9dc2c9cb68e390634a4202f84b8569f64b6569bfcce46348fd9fd%40%3Ccommits.commons.apache.org%3E"
          },
          {
            "name": "[commons-issues] 20190528 [jira] [Closed] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/098e9aae118ac5c06998a9ba4544ab2475162981d290fdef88e6f883%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-notifications] 20190528 Build failed in Jenkins: commons-beanutils #74",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/fda473f46e51019a78ab217a7a3a3d48dafd90846e75bd5536ef72f3%40%3Cnotifications.commons.apache.org%3E"
          },
          {
            "name": "[commons-commits] 20190528 [commons-beanutils] branch master updated: [BEANUTILS-520] BeanUtils2 mitigate CVE-2014-0114.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/c24c0b931632a397142882ba248b7bd440027960f22845c6f664c639%40%3Ccommits.commons.apache.org%3E"
          },
          {
            "name": "[commons-issues] 20190528 [jira] [Work logged] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/42ad6326d62ea8453d0d0ce12eff39bbb7c5b4fca9639da007291346%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-notifications] 20190528 Build failed in Jenkins: commons-beanutils #75",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/ebc4f019798f6ce2a39f3e0c26a9068563a9ba092cdf3ece398d4e2f%40%3Cnotifications.commons.apache.org%3E"
          },
          {
            "name": "[commons-dev] 20190605 Re: [beanutils] Towards 1.10",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/df093c662b5e49fe9e38ef91f78ffab09d0839dea7df69a747dffa86%40%3Cdev.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/9b5505632f5683ee17bda4f7878525e672226c7807d57709283ffa64%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-issues] 20190615 [jira] [Updated] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/cee6b1c4533be1a753614f6a7d7c533c42091e7cafd7053b8f62792a%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-issues] 20190615 [jira] [Reopened] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/df1c385f2112edffeff57a6b21d12e8d24031a9f578cb8ba22a947a8%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-issues] 20190615 [jira] [Resolved] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/2454e058fd05ba30ca29442fdeb7ea47505d47a888fbc9f3a53f31d0%40%3Cissues.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/869c08899f34c1a70c9fb42f92ac0d043c98781317e0c19d7ba3f5e3%40%3Cissues.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/084ae814e69178d2ce174cfdf149bc6e46d7524f3308c08d3adb43cb%40%3Cissues.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/f3682772e62926b5c009eed63c62767021be6da0bb7427610751809f%40%3Cissues.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/aa4ca069c7aea5b1d7329bc21576c44a39bcc4eb7bb2760c4b16f2f6%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-dev] 20190814 [SECURITY] CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/88c497eead24ed517a2bb3159d3dc48725c215e97fe7a98b2cf3ea25%40%3Cdev.commons.apache.org%3E"
          },
          {
            "name": "[commons-user] 20190814 [SECURITY] CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/0a35108a56e2d575e3b3985588794e39fbf264097aba66f4c5569e4f%40%3Cuser.commons.apache.org%3E"
          },
          {
            "name": "[announce] 20190814 [SECURITY] CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/918ec15a80fc766ff46c5d769cb8efc88fed6674faadd61a7105166b%40%3Cannounce.apache.org%3E"
          },
          {
            "name": "[commons-issues] 20190818 [jira] [Commented] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/c7e31c3c90b292e0bafccc4e1b19c9afc1503a65d82cb7833dfd7478%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[activemq-gitbox] 20190903 [GitHub] [activemq-artemis] jeloba opened a new pull request #2820: Updated Apache BeanUtils to address CVE",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/d27c51b3c933f885460aa6d3004eb228916615caaaddbb8e8bfeeb40%40%3Cgitbox.activemq.apache.org%3E"
          },
          {
            "name": "[activemq-issues] 20190904 [jira] [Created] (ARTEMIS-2470) Update Apache BeanUtils to Address CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/3f500972dceb48e3cb351f58565aecf6728b1ea7a69593af86c30b30%40%3Cissues.activemq.apache.org%3E"
          },
          {
            "name": "[commons-commits] 20190906 [commons-configuration] branch master updated: [CONFIGURATION-755][CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/1565e8b786dff4cb3b48ecc8381222c462c92076c9e41408158797b5%40%3Ccommits.commons.apache.org%3E"
          },
          {
            "name": "[commons-issues] 20190906 [jira] [Updated] (CONFIGURATION-755) [CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[commons-issues] 20190906 [jira] [Closed] (CONFIGURATION-755) [CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[activemq-issues] 20190909 [jira] [Work logged] (ARTEMIS-2470) Update Apache BeanUtils to Address CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/0efed939139f5b9dcd62b8acf7cb8a9789227d14abdc0c6f141c4a4c%40%3Cissues.activemq.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/09981ae3df188a2ad1ce20f62ef76a5b2d27cf6b9ebab366cf1d6cc6%40%3Cissues.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/6b30629b32d020c40d537f00b004d281c37528d471de15ca8aec2cd4%40%3Cissues.commons.apache.org%3E"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/6afe2f935493e69a332b9c5a4f23cafe95c15ede1591a492cf612293%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "RHSA-2019:2995",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2019:2995"
          },
          {
            "name": "[commons-issues] 20191014 [jira] [Updated] (BEANUTILS-520) Mitigate CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/66176fa3caeca77058d9f5b0316419a43b4c3fa2b572e05b87132226%40%3Cissues.commons.apache.org%3E"
          },
          {
            "name": "[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E"
          },
          {
            "name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E"
          },
          {
            "name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E"
          },
          {
            "name": "[druid-commits] 20191115 [GitHub] [incubator-druid] ccaominh opened a new pull request #8878: Address security vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E"
          },
          {
            "name": "[activemq-issues] 20200109 [jira] [Resolved] (ARTEMIS-2470) Update Apache BeanUtils to Address CVE-2014-0114",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r75d67108e557bb5d4c4318435067714a0180de525314b7e8dab9d04e%40%3Cissues.activemq.apache.org%3E"
          },
          {
            "name": "[lucene-solr-user] 20200320 CVEs (vulnerabilities) that apply to Solr 8.4.1",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E"
          },
          {
            "name": "[lucene-solr-user] 20200320 Re: CVEs (vulnerabilities) that apply to Solr 8.4.1",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/rf5230a049d989dbfdd404b4320a265dceeeba459a4d04ec21873bd55%40%3Csolr-user.lucene.apache.org%3E"
          },
          {
            "name": "[dolphinscheduler-commits] 20210121 [GitHub] [incubator-dolphinscheduler] c-f-cooper commented on issue #4506: There is a vulnerability in beanutils 1.7.0,upgrade recommended",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread.html/r458d61eaeadecaad04382ebe583230bc027f48d9e85e4731bc573477%40%3Ccommits.dolphinscheduler.apache.org%3E"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2014-0114",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T16:20:46.164537Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T16:20:55.413Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-04-29T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to \"manipulate\" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-01-21T14:06:10.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[apache-ignite-developers] 20180601  [CVE-2014-0114]: Apache Ignite is vulnerable to existing CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://apache-ignite-developers.2346864.n4.nabble.com/CVE-2014-0114-Apache-Ignite-is-vulnerable-to-existing-CVE-2014-0114-td31205.html"
        },
        {
          "name": "57477",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/57477"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2014-0008.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.apache.org/jira/browse/BEANUTILS-463"
        },
        {
          "name": "58710",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58710"
        },
        {
          "name": "MDVSA-2014:095",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2014:095"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2014-0012.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675689"
        },
        {
          "name": "FEDORA-2014-9380",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136958.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21674812"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20140911-0001/"
        },
        {
          "name": "59464",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59464"
        },
        {
          "name": "59118",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59118"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20180629-0006/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675387"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://access.redhat.com/solutions/869353"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1091938"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://advisories.mageia.org/MGASA-2014-0219.html"
        },
        {
          "name": "60703",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60703"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675972"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676375"
        },
        {
          "name": "[oss-security] 20140707 Re: CVE request for commons-beanutils: \u0027class\u0027 property is exposed, potentially leading to RCE",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2014/07/08/1"
        },
        {
          "name": "RHSA-2018:2669",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2669"
        },
        {
          "name": "GLSA-201607-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201607-09"
        },
        {
          "name": "HPSBST03160",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=141451023707502\u0026w=2"
        },
        {
          "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/534161/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675898"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676110"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg27042296"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676303"
        },
        {
          "name": "59228",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59228"
        },
        {
          "name": "59246",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59246"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1116665"
        },
        {
          "name": "[oss-security] 20140616 CVE request for commons-beanutils: \u0027class\u0027 property is exposed, potentially leading to RCE",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://openwall.com/lists/oss-security/2014/06/15/10"
        },
        {
          "name": "59245",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59245"
        },
        {
          "name": "HPSBMU03090",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=140801096002766\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21674128"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676931"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html"
        },
        {
          "name": "60177",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60177"
        },
        {
          "name": "20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2014/Dec/23"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ibm.com/support/docview.wss?uid=swg21675496"
        },
        {
          "name": "DSA-2940",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-2940"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21675266"
        },
        {
          "name": "59014",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59014"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21677110"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www-01.ibm.com/support/docview.wss?uid=swg21676091"
        },
        {
          "name": "67121",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/67121"
        },
        {
          "name": "59480",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59480"
        },
        {
          "name": "HPSBGN03041",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=140119284401582\u0026w=2"
        },
        {
          "name": "59479",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59479"
        },
        {
          "name": "59704",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59704"
        },
        {
          "name": "58947",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58947"
        },
        {
          "name": "59718",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59718"
        },
        {
          "name": "59430",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/59430"
        },
        {
          "name": "58851",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/58851"
        },
        {
          "name": "[lucene-solr-user] 20190104 Re: SOLR v7 Security Issues Caused Denial of Use - Sonatype Application Composition Report",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E"
        },
        {
          "name": "[infra-devnull] 20190329 [GitHub] [pulsar] massakam opened pull request #3938: Upgrade third party libraries with security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/37e1ed724a1b0e5d191d98c822c426670bdfde83804567131847d2a3%40%3Cdevnull.infra.apache.org%3E"
        },
        {
          "name": "[pulsar-commits] 20190329 [GitHub] [pulsar] massakam opened a new pull request #3938: Upgrade third party libraries with security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/c70da3cb6e3f03e0ad8013e38b6959419d866c4a7c80fdd34b73f25c%40%3Ccommits.pulsar.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html"
        },
        {
          "name": "[commons-issues] 20190521 [jira] [Created] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/97fc033dad4233a5d82fcb75521eabdd23dd99ef32eb96f407f96a1a%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-issues] 20190522 [jira] [Commented] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/8e2bdfabd5b14836aa3cf900aa0a62ff9f4e22a518bb4e553ebcf55f%40%3Cissues.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/65b39fa6d700e511927e5668a4038127432178a210aff81500eb36e5%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-issues] 20190522 [jira] [Work logged] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/080af531a9113e29d3f6a060e3f992dc9f40315ec7234e15c3b339e3%40%3Cissues.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/ffde3f266d3bde190b54c9202169e7918a92de7e7e0337d792dc7263%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-dev] 20190522 [beanutils2] CVE-2014-0114 Pull Request",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/40fc236a35801a535cd49cf1979dbeab034b833c63a284941bce5bf1%40%3Cdev.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/15fcdf27fa060de276edc0b4098526afc21c236852eb3de9be9594f3%40%3Cissues.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/4c3fd707a049bfe0577dba8fc9c4868ffcdabe68ad86586a0a49242e%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-dev] 20190525 Re: [beanutils2] CVE-2014-0114 Pull Request",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/0340493a1ddf3660dee09a5c503449cdac5bec48cdc478de65858859%40%3Cdev.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/2ba22f2e3de945039db735cf6cbf7f8be901ab2537337c7b1dd6a0f0%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-commits] 20190528 [commons-beanutils] branch master updated: BEANUTILS-520: Mitigate CVE-2014-0114 by enabling SuppressPropertiesBeanIntrospector.SUPPRESS_CLASS by default. (#7)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/31f9dc2c9cb68e390634a4202f84b8569f64b6569bfcce46348fd9fd%40%3Ccommits.commons.apache.org%3E"
        },
        {
          "name": "[commons-issues] 20190528 [jira] [Closed] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/098e9aae118ac5c06998a9ba4544ab2475162981d290fdef88e6f883%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-notifications] 20190528 Build failed in Jenkins: commons-beanutils #74",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/fda473f46e51019a78ab217a7a3a3d48dafd90846e75bd5536ef72f3%40%3Cnotifications.commons.apache.org%3E"
        },
        {
          "name": "[commons-commits] 20190528 [commons-beanutils] branch master updated: [BEANUTILS-520] BeanUtils2 mitigate CVE-2014-0114.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/c24c0b931632a397142882ba248b7bd440027960f22845c6f664c639%40%3Ccommits.commons.apache.org%3E"
        },
        {
          "name": "[commons-issues] 20190528 [jira] [Work logged] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/42ad6326d62ea8453d0d0ce12eff39bbb7c5b4fca9639da007291346%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-notifications] 20190528 Build failed in Jenkins: commons-beanutils #75",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/ebc4f019798f6ce2a39f3e0c26a9068563a9ba092cdf3ece398d4e2f%40%3Cnotifications.commons.apache.org%3E"
        },
        {
          "name": "[commons-dev] 20190605 Re: [beanutils] Towards 1.10",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/df093c662b5e49fe9e38ef91f78ffab09d0839dea7df69a747dffa86%40%3Cdev.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/9b5505632f5683ee17bda4f7878525e672226c7807d57709283ffa64%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-issues] 20190615 [jira] [Updated] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/cee6b1c4533be1a753614f6a7d7c533c42091e7cafd7053b8f62792a%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-issues] 20190615 [jira] [Reopened] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/df1c385f2112edffeff57a6b21d12e8d24031a9f578cb8ba22a947a8%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-issues] 20190615 [jira] [Resolved] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/2454e058fd05ba30ca29442fdeb7ea47505d47a888fbc9f3a53f31d0%40%3Cissues.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/869c08899f34c1a70c9fb42f92ac0d043c98781317e0c19d7ba3f5e3%40%3Cissues.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/084ae814e69178d2ce174cfdf149bc6e46d7524f3308c08d3adb43cb%40%3Cissues.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/f3682772e62926b5c009eed63c62767021be6da0bb7427610751809f%40%3Cissues.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/aa4ca069c7aea5b1d7329bc21576c44a39bcc4eb7bb2760c4b16f2f6%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-dev] 20190814 [SECURITY] CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/88c497eead24ed517a2bb3159d3dc48725c215e97fe7a98b2cf3ea25%40%3Cdev.commons.apache.org%3E"
        },
        {
          "name": "[commons-user] 20190814 [SECURITY] CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/0a35108a56e2d575e3b3985588794e39fbf264097aba66f4c5569e4f%40%3Cuser.commons.apache.org%3E"
        },
        {
          "name": "[announce] 20190814 [SECURITY] CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/918ec15a80fc766ff46c5d769cb8efc88fed6674faadd61a7105166b%40%3Cannounce.apache.org%3E"
        },
        {
          "name": "[commons-issues] 20190818 [jira] [Commented] (BEANUTILS-520) BeanUtils2 mitigate CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/c7e31c3c90b292e0bafccc4e1b19c9afc1503a65d82cb7833dfd7478%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[activemq-gitbox] 20190903 [GitHub] [activemq-artemis] jeloba opened a new pull request #2820: Updated Apache BeanUtils to address CVE",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/d27c51b3c933f885460aa6d3004eb228916615caaaddbb8e8bfeeb40%40%3Cgitbox.activemq.apache.org%3E"
        },
        {
          "name": "[activemq-issues] 20190904 [jira] [Created] (ARTEMIS-2470) Update Apache BeanUtils to Address CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/3f500972dceb48e3cb351f58565aecf6728b1ea7a69593af86c30b30%40%3Cissues.activemq.apache.org%3E"
        },
        {
          "name": "[commons-commits] 20190906 [commons-configuration] branch master updated: [CONFIGURATION-755][CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/1565e8b786dff4cb3b48ecc8381222c462c92076c9e41408158797b5%40%3Ccommits.commons.apache.org%3E"
        },
        {
          "name": "[commons-issues] 20190906 [jira] [Updated] (CONFIGURATION-755) [CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/956995acee0d8bc046f1df0a55b7fbeb65dd2f82864e5de1078bacb0%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[commons-issues] 20190906 [jira] [Closed] (CONFIGURATION-755) [CVE-2014-0114] Update Apache Commons BeanUtils from 1.9.3 to 1.9.4.",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/1f78f1e32cc5614ec0c5b822ba4bd7fc8e8b5c46c8e038b6bd609cb5%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[activemq-issues] 20190909 [jira] [Work logged] (ARTEMIS-2470) Update Apache BeanUtils to Address CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/0efed939139f5b9dcd62b8acf7cb8a9789227d14abdc0c6f141c4a4c%40%3Cissues.activemq.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/09981ae3df188a2ad1ce20f62ef76a5b2d27cf6b9ebab366cf1d6cc6%40%3Cissues.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/6b30629b32d020c40d537f00b004d281c37528d471de15ca8aec2cd4%40%3Cissues.commons.apache.org%3E"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread.html/6afe2f935493e69a332b9c5a4f23cafe95c15ede1591a492cf612293%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "RHSA-2019:2995",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2019:2995"
        },
        {
          "name": "[commons-issues] 20191014 [jira] [Updated] (BEANUTILS-520) Mitigate CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/66176fa3caeca77058d9f5b0316419a43b4c3fa2b572e05b87132226%40%3Cissues.commons.apache.org%3E"
        },
        {
          "name": "[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E"
        },
        {
          "name": "[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E"
        },
        {
          "name": "[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E"
        },
        {
          "name": "[druid-commits] 20191115 [GitHub] [incubator-druid] ccaominh opened a new pull request #8878: Address security vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/9317fd092b257a0815434b116a8af8daea6e920b6673f4fd5583d5fe%40%3Ccommits.druid.apache.org%3E"
        },
        {
          "name": "[activemq-issues] 20200109 [jira] [Resolved] (ARTEMIS-2470) Update Apache BeanUtils to Address CVE-2014-0114",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r75d67108e557bb5d4c4318435067714a0180de525314b7e8dab9d04e%40%3Cissues.activemq.apache.org%3E"
        },
        {
          "name": "[lucene-solr-user] 20200320 CVEs (vulnerabilities) that apply to Solr 8.4.1",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r204ba2a9ea750f38d789d2bb429cc0925ad6133deea7cbc3001d96b5%40%3Csolr-user.lucene.apache.org%3E"
        },
        {
          "name": "[lucene-solr-user] 20200320 Re: CVEs (vulnerabilities) that apply to Solr 8.4.1",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/rf5230a049d989dbfdd404b4320a265dceeeba459a4d04ec21873bd55%40%3Csolr-user.lucene.apache.org%3E"
        },
        {
          "name": "[dolphinscheduler-commits] 20210121 [GitHub] [incubator-dolphinscheduler] c-f-cooper commented on issue #4506: There is a vulnerability in beanutils 1.7.0,upgrade recommended",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.apache.org/thread.html/r458d61eaeadecaad04382ebe583230bc027f48d9e85e4731bc573477%40%3Ccommits.dolphinscheduler.apache.org%3E"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-0114",
    "datePublished": "2014-04-30T10:00:00.000Z",
    "dateReserved": "2013-12-03T00:00:00.000Z",
    "dateUpdated": "2026-10-14T16:20:55.413Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted