CVE-2014-0114

EXPLOITED

Apache Commons BeanUtils <1.9.2 - RCE

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2014-0114 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 4 public exploits from researchers including Metasploit, rgielen, aenlr.

AI-analyzed exploit summary This Metasploit module exploits CVE-2014-0114 in Apache Struts 1.x and 2.x by manipulating the ClassLoader to achieve remote code execution. It supports multiple targets, including Java, Linux, and Windows, and can deliver payloads via HTTP or SMB.

Description

Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.

Exploits (4)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotemultiple
https://www.exploit-db.com/exploits/41690

This Metasploit module exploits CVE-2014-0114 in Apache Struts 1.x and 2.x by manipulating the ClassLoader to achieve remote code execution. It supports multiple targets, including Java, Linux, and Windows, and can deliver payloads via HTTP or SMB.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Apache Struts 1.x (<= 1.3.10) and 2.x (< 2.3.16.2)
No auth needed
Prerequisites: Access to a vulnerable Apache Struts application · Network connectivity to the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WORKING POC 12 stars
by rgielen · poc
https://github.com/rgielen/struts1filter

This repository provides a filter-based mitigation for CVE-2014-0114, a class parameter manipulation vulnerability in Apache Struts 1. The filter intercepts and sanitizes HTTP requests to block malicious parameter names matching a configurable regex pattern.

Classification
Working Poc 95%
Attack Type
Other
Complexity
Moderate
Reliability
Reliable
Target: Apache Struts 1
No auth needed
Prerequisites: Apache Struts 1 application with vulnerable parameter handling
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WRITEUP 2 stars
by aenlr · poc
https://github.com/aenlr/strutt-cve-2014-0114

This repository provides a detailed writeup and analysis of CVE-2014-0114, a vulnerability in Apache Struts 1.x that allows manipulation of Form Beans via the `class` attribute, leading to potential RCE in Tomcat and DoS in JBoss/Wildfly environments. The README explains the technical mechanics and impact of the vulnerability.

Classification
Writeup 90%
Attack Type
Rce | Dos
Complexity
Moderate
Reliability
Reliable
Target: Apache Struts 1.x (EOL), Tomcat, JBoss/Wildfly
No auth needed
Prerequisites: Target application running Apache Struts 1.x · Access to send crafted HTTP requests to the application
devstral-2 · analyzed Feb 16, 2026 Full analysis →
nomisec WRITEUP 1 stars
by ricedu · poc
https://github.com/ricedu/struts1-patch

This repository contains a patch for CVE-2014-0114, a classLoader manipulation vulnerability in Apache Struts 1. It includes modified source files and a README referencing a detailed description from Tencent Security.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Apache Struts 1
No auth needed
Prerequisites: Access to a vulnerable Apache Struts 1 application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (119)

Core 119
Core References
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21675689
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21675972
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21675898
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676375
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676110
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg27042296
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676303
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676931
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21677110
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21676091
Various Sources x_refsource_confirm
https://issues.apache.org/jira/browse/BEANUTILS-463
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2669
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:2995
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201607-09
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/57477
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/58710
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2014:095
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2014-August/136958.html
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21674812
Vendor Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20140911-0001/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59464
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59118
Vendor Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20180629-0006/
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21675387
Vendor Advisory x_refsource_confirm
https://access.redhat.com/solutions/869353
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1091938
Third Party Advisory x_refsource_confirm
http://advisories.mageia.org/MGASA-2014-0219.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60703
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2014/07/08/1
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=141451023707502&w=2
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/534161/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59228
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59246
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1116665
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2014/06/15/10
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59245
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=140801096002766&w=2
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21674128
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/60177
Mailing List mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2014/Dec/23
Various Sources x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21675496
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2014/dsa-2940
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21675266
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59014
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/67121
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59480
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=140119284401582&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59479
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59704
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/58947
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59718
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59430
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/58851

Scores

EPSS 0.9233
EPSS Percentile 99.7%

Details

VulnCheck KEV 2022-05-11
CWE
CWE-20
Status published
Products (14)
apache/commons_beanutils < 1.9.1
apache/struts 1.0
apache/struts 1.0.2
apache/struts 1.1 (6 CPE variants)
apache/struts 1.2.2
apache/struts 1.2.4
apache/struts 1.2.6
apache/struts 1.2.7
apache/struts 1.2.8
apache/struts 1.2.9
... and 4 more
Published Apr 30, 2014
Tracked Since Feb 18, 2026