target entity

Struts 1

2 source-linked records in the current knowledge graph.

Feb 10, 2022high

CVE-2017-9791: Apache Struts 1 Improper Input Validation Vulnerability

The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage. Required action: Apply updates per vendor instructions.

CVE-2017-9791EPSS 98.9%ApacheStruts 1

CISA KEV ↗ · unattributed attribution

Jan 21, 2022high

CVE-2006-1547: Apache Struts 1 ActionForm Denial-of-Service Vulnerability

ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS). Required action: Apply updates per vendor instructions.

CVE-2006-1547EPSS 54.6%ApacheStruts 1

CISA KEV ↗ · unattributed attribution