CVE-2013-1965
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 94%
from disclosure to weapon694 days
Published on NVDJul 10
1st PoC+694d
VulnCheck+4869d
What the vendors declare (VEX)
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Red HatVEX document ↗
Not affected
1 product — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 5
Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.
Affected products
n/a · n/apublic PoCs found — 1
vulncheckvulncheck.com/xdb/c9b701c72a52unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.