CVE-2013-2251

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.

CISA Known Exploited Vulnerability

Vendor / Product Apache — Struts
Date Added 2022-03-25
Remediation Due 2022-04-15
https://nvd.nist.gov/vuln/detail/CVE-2013-2251

Weakness Classification (1)

References & Advisories (17)

http://seclists.org/oss-sec/2014/q1/89
Mailing List Third Party Advisory
http://cxsecurity.com/issue/WLB-2014010087
Exploit Third Party Advisory
http://seclists.org/fulldisclosure/2013/Oct/96
Exploit Mailing List Third Party Advisory
http://www.securityfocus.com/bid/61189
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/64758
Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1029184
Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1032916
Broken Link Third Party Advisory VDB Entry

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →