[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLEWyMSuiqCZe1HDIDp_-Tckg4aCj-wJYcTwjGqbApVM":3,"g5a-risk:CVE-2014-0112":171},{"success":4,"data":5,"meta":169},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":38,"references":39,"referencesCount":125,"weaknesses":126,"weaknessesCount":38,"isActivelyExploited":130,"cisaInfo":15,"otxData":15,"relatedBlogPosts":131,"seoMetadata":132,"configurations":157,"relatedVendorCves":167,"notableEvents":168},"CVE-2014-0112","What is CVE-2014-0112?","ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to \"manipulate\" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-0094.","ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to \"manipulate\" ...","2014-04-29T10:37:03.67","2025-04-12T10:46:40.837",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","PARTIAL","HIGH",10,6.4,0.98056,[29,29,29,29,29,29,29],"High",[33],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"apache","struts","*","cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",1,[40,46,49,53,58,61,65,69,73,76,79,83,87,91,97,99,101,103,105,107,109,111,113,115,117,119,121,123],{"url":41,"source":42,"tags":43},"http:\u002F\u002Fjvn.jp\u002Fen\u002Fjp\u002FJVN19294237\u002Findex.html","Jvn",[44,45],"Third Party Advisory","VDB Entry",{"url":47,"source":42,"tags":48},"http:\u002F\u002Fjvndb.jvn.jp\u002Fjvndb\u002FJVNDB-2014-000045",[44,45],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F127215\u002FVMware-Security-Advisory-2014-0007.html","Packetstormsecurity",[44,45],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F59178","Secunia",[57],"Permissions Required",{"url":59,"source":55,"tags":60},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F59500",[57],{"url":62,"source":63,"tags":64},"http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg21676706","Ibm",[44],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Ftopics\u002Fsecurity\u002Fcpuapr2015-2365600.html","Oracle",[44],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F531952\u002F100\u002F0\u002Fthreaded","Securityfocus",[44,45],{"url":74,"source":71,"tags":75},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F532549\u002F100\u002F0\u002Fthreaded",[44,45],{"url":77,"source":71,"tags":78},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F67064",[44,45],{"url":80,"source":81,"tags":82},"http:\u002F\u002Fwww.vmware.com\u002Fsecurity\u002Fadvisories\u002FVMSA-2014-0007.html","Vmware",[44],{"url":84,"source":85,"tags":86},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0910","Red Hat",[44],{"url":88,"source":85,"tags":89},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1091939",[90],"Issue Tracking",{"url":92,"source":93,"tags":94},"https:\u002F\u002Fcwiki.apache.org\u002Fconfluence\u002Fdisplay\u002FWW\u002FS2-021","Apache",[95,96],"Patch","Vendor Advisory",{"url":41,"source":42,"tags":98},[44,45],{"url":47,"source":42,"tags":100},[44,45],{"url":50,"source":51,"tags":102},[44,45],{"url":54,"source":55,"tags":104},[57],{"url":59,"source":55,"tags":106},[57],{"url":62,"source":63,"tags":108},[44],{"url":66,"source":67,"tags":110},[44],{"url":70,"source":71,"tags":112},[44,45],{"url":74,"source":71,"tags":114},[44,45],{"url":77,"source":71,"tags":116},[44,45],{"url":80,"source":81,"tags":118},[44],{"url":84,"source":85,"tags":120},[44],{"url":88,"source":85,"tags":122},[90],{"url":92,"source":93,"tags":124},[95,96],28,[127],{"id":128,"name":128,"description":129},"Unknown","CWE-264",false,[],{"title":133,"metaDescription":134,"keywords":135,"canonicalUrl":136,"structuredData":137},"What is CVE-2014-0112? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2014-0112, a high severity cyber security vulnerability from 2014. High exploit probability (98.1%). ParametersInterceptor in A...","CVE-2014-0112, CVE-2014-0112 vulnerability, CVE-2014-0112 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2014, CVSS score, exploit, patch, remediation, apache security, struts vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2014-0112",{"@context":138,"@type":139,"headline":133,"description":134,"datePublished":10,"dateModified":11,"author":140,"publisher":144,"about":148,"mainEntityOfPage":152,"articleSection":155,"keywords":156},"https:\u002F\u002Fschema.org","TechArticle",{"@type":141,"name":142,"url":143},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":141,"name":142,"url":143,"logo":145},{"@type":146,"url":147},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":149,"name":6,"description":150,"additionalType":151},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":153,"@id":154},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2014-0112","Cybersecurity","CVE-2014-0112, CVE-2014-0112 vulnerability, CVE-2014-0112 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[158],{"Operator":15,"Negate":15,"Nodes":159},[160],{"Operator":161,"Negate":15,"CPEMatch":162},"OR",[163],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":164,"VersionStartExcluding":15,"VersionStartIncluding":165,"VersionEndExcluding":166,"VersionEndIncluding":15},"769DE043-2954-4F02-A260-91484452AC83","2.0.0","2.3.16.2",[],[],{"lastModified":11,"cacheTime":170,"version":21},1792326626771,{"score":172,"band":173,"action":174,"scoredAt":175},68,"Medium","Plan remediation","2026-10-17T07:08:34.599444+00:00"]