| CVE-2017-12611 |
In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag…
|
Not rated
|
Sep 20, 2017 |
| CVE-2016-8738 |
In Apache Struts 2.5 through 2.5.5, if an application allows entering a URL in a form field and the built-in…
|
Not rated
|
Sep 20, 2017 |
| CVE-2016-6795 |
In the Convention plugin in Apache Struts 2.3.x before 2.3.31, and 2.5.x before 2.5.5, it is possible to prepare a…
|
Not rated
|
Sep 20, 2017 |
| CVE-2017-9805 |
Exploited
Apache Struts Deserialization of Untrusted Data Vulnerability
|
8.1
High
|
Sep 15, 2017 |
| CVE-2017-9787 |
When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack
|
Not rated
|
Jul 13, 2017 |
| CVE-2017-7672 |
If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a…
|
Not rated
|
Jul 13, 2017 |
| CVE-2017-9791 |
Exploited
Apache Struts 1 Improper Input Validation Vulnerability
|
9.8
Critical
|
Jul 10, 2017 |
| CVE-2017-5638 |
Exploited
Apache Struts Remote Code Execution Vulnerability
|
9.8
Critical
|
Mar 11, 2017 |