Name	struts_ognl
CVE	CVE-2017-5638 Exploit Pack
VENDOR: Apache
NOTES:
The JAR Server will listen on the port provided in the UI. However, if that port is unavailable,
a random one will be chosen.

Example vulnerable application: struts2-showcase in Struts 2.3.31 .
Example URL: http://172.16.196.137:8080/struts2-showcase/showcase.action

Versions tested:

> Ubuntu Linux 14.04.3
Java 7u22/Tomcat 8.5.11/Struts 2.3.31

Repeatability: One shot
References: [‘http://blog.trendmicro.com/trendlabs-security-intelligence/cve-2017-5638-apache-struts-vulnerability-remote-code-execution/’, ‘http://blog.talosintelligence.com/2017/03/apache-0-day-exploited.html’, ‘https://github.com/tengzhangchao/Struts2_045-Poc’]
CVE Url: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5638

checkpoint_advisories 2

myhack58 8

trendmicroblog 3

redhatcve 1

kitploit 10

saint 3

attackerkb 2

threatpost 18

atlassian 4

openvas 14

impervablog 9

prion 1

vmware 2

rapid7community 1

osv 2

qualysblog 6

lenovo 2

ubuntucve 1

malwarebytes 1

hackerone 3

ibm 10

nessus 9

packetstorm 2

cisa_kev 1

securelist 1

thn 10

cisco 1

seebug 2

krebs 1

f5 1

veracode 1

zdt 2

cve 1

github 3

cloudfoundry 1

huawei 1

cert 1

nuclei 1

pentestit 2

talosblog 4

nmap 1

ics 1

oracle 2

checkpoint_advisories

Apache Struts2 Content-Type Remote Code Execution (CVE-2017-5638)

2017-03-07 00:00:00

Apache Struts 2 Content-Disposition Remote Code Execution (CVE-2017-5638)

2017-08-09 00:00:00

myhack58

How fast the use of s02-45 vulnerability to gain server access-vulnerability warning-the black bar safety net

2017-03-08 00:00:00

Apache Struts2 high-risk vulnerabilities cause the Enterprise Server is the invasion mounted KoiMiner mining Trojan-vulnerability warning-the black bar safety net

2018-07-10 00:00:00

Apache Struts2 exposure arbitrary code execution vulnerability (S2-045,CVE-2017-5638)-vulnerability warning-the black bar safety net

2017-03-07 00:00:00

trendmicroblog

Sound, Fury, And Nothing One Year After Equifax

2018-09-07 12:00:34

Linux is secure…right?

2017-06-15 19:00:13

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of September 11, 2017

2017-09-15 14:59:53

redhatcve

CVE-2017-5638

2017-03-08 11:53:37

kitploit

Struts2Shell - Interactive Shell Command to Exploit Apache Struts CVE-2017-5638

2017-03-17 14:22:00

strutszeiro - Telegram Bot to manage botnets created with struts vulnerability (CVE-2017-5638)

2017-03-14 17:30:00

struts-pwn - An exploit for Apache Struts CVE-2017-5638

2017-03-14 13:34:00

saint

Apache Struts 2 Jakarta Multipart Parser file upload command execution

2017-03-16 00:00:00

Apache Struts 2 Jakarta Multipart Parser file upload command execution

2017-03-16 00:00:00

Apache Struts 2 Jakarta Multipart Parser file upload command execution

2017-03-16 00:00:00

attackerkb

CVE-2017-5638

2017-03-11 00:00:00

CVE-2019-0230

2020-09-14 00:00:00

threatpost

Apache Attack Traffic Dropping, Limited to Few Sources

2017-03-10 10:51:01

Equifax Says 145.5M Affected by Breach, Ex-CEO Testifies

2017-10-03 15:27:08

Equifax to Pay $700 Million in 2017 Data Breach Settlement

2019-07-22 14:31:39

atlassian

Apache Struts 2 Remote Code Execution (CVE-2017-5638)

2017-03-10 04:57:51

Apache Struts 2 Remote Code Execution (CVE-2017-5638)

2017-03-10 04:31:09

Apache Struts 2 Remote Code Execution (CVE-2017-5638)

2017-03-10 04:31:09

openvas

Apache Struts Security Update (S2-045) - Active Check

2017-03-08 00:00:00

Cisco Unified Communications Manager IM and Presence Service Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability

2017-03-14 00:00:00

Atlassian Bamboo Struts2 RCE Vulnerability

2017-03-15 00:00:00

impervablog

Two New Trends Make Early Breach Detection and Prevention a Security Imperative

2022-08-31 13:47:34

Keeping Your WAF Relevant: Emergency Feed Pushes New Mitigations in Just Hours

2018-04-26 19:01:59

Clustering App Attacks with Machine Learning Part 3: Algorithm Results

2018-06-19 22:41:03

prion

Design/Logic Flaw

2017-03-11 02:59:00

vmware

VMware product updates resolve remote code execution vulnerability via Apache Struts 2

2017-03-13 00:00:00

VMware product updates resolve remote code execution vulnerability via Apache Struts 2

2017-03-13 00:00:00

rapid7community

Apache Struts Vulnerability (CVE-2017-5638) Exploit Traffic

2017-03-15 14:29:55

osv

Apache Struts vulnerable to remote arbitrary command execution due to improper input validation

2018-10-18 19:24:26

CVE-2017-5638

2017-03-11 02:59:00

qualysblog

Cryptomining is all the rage among hackers, as DDoS amplification attacks continue

2018-03-09 21:45:09

How To Prioritize Vulnerabilities in a Modern IT Environment

2018-05-07 16:00:10

The Sky Is Falling! Responding Rationally to Headline Vulnerabilities

2018-04-19 23:00:03

lenovo

Apache Struts Open Source Framework Remote Code Execution - Lenovo Support US

2017-06-09 00:00:00

Apache Struts Open Source Framework Remote Code Execution - us

2017-06-09 00:00:00

ubuntucve

CVE-2017-5638

2017-03-11 00:00:00

malwarebytes

Equifax breach: What you need to know [updated]

2017-09-08 07:02:47

hackerone

U.S. Dept Of Defense: Remote Code Execution (RCE) in a DoD website

2017-03-09 17:59:08

U.S. Dept Of Defense: Remote code execution vulnerability on a DoD website

2017-03-13 04:14:12

U.S. Dept Of Defense: Remote Code Execution (RCE) in a DoD website

2017-03-13 13:22:29

ibm

Security Bulletin: Apache Struts v2 Jakarta Multipart parser code execution affects IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation (CVE-2017-5638)

2018-06-18 01:35:33

Security Bulletin: A vulnerability in Apache Struts affects the IBM FlashSystem model V840

2018-06-18 00:32:46

Security Bulletin: IBM Sterling Order Management is affected by a vulnerability (CVE-2017-5638)

2018-06-16 20:09:19

nessus

Apache Struts 2.3.5 - 2.3.31 / 2.5.x < 2.5.10.1 Jakarta Multipart Parser RCE (remote)

2017-03-08 00:00:00

Apache Struts 2.3.5 - 2.3.31 / 2.5.x < 2.5.10.1 Jakarta Multipart Parser RCE (S2-045) (S2-046)

2017-03-07 00:00:00

Apache Struts 2 RCE (CVE-2017-5638) (deprecated)

2017-04-12 00:00:00

packetstorm

Apache Struts 2 2.3.x / 2.5.x Remote Code Execution

2017-03-10 00:00:00

Apache Struts Jakarta Multipart Parser OGNL Injection

2017-03-14 00:00:00

cisa_kev

Apache Struts Remote Code Execution Vulnerability

2021-11-03 00:00:00

securelist

Unveiling NKAbuse: a new multiplatform threat abusing the NKN protocol

2023-12-14 13:00:40

thn

New Apache Struts Zero-Day Vulnerability Being Exploited in the Wild

2017-03-09 01:03:00

UK Regulator Fines Equifax £500,000 Over 2017 Data Breach

2018-09-20 13:54:00

Whoops, Turns Out 2.5 Million More Americans Were Affected By Equifax Breach

2017-10-02 21:23:00

cisco

Apache Struts2 Jakarta Multipart Parser File Upload Code Execution Vulnerability Affecting Cisco Products

2017-03-10 19:30:00

seebug

S2-046: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638）

2017-03-21 00:00:00

S2-045: Struts 2 Remote Code Execution vulnerability（CVE-2017-5638）

2017-03-06 00:00:00

krebs

Equifax Hackers Stole 200k Credit Card Accounts in One Fell Swoop

2017-09-14 18:03:12

K43451236 : Apache Struts 2 vulnerability CVE-2017-5638

2017-03-09 00:00:00

veracode

Remote Code Execution (RCE) Through Jakarta Multipart Parser

2017-03-09 12:39:55

zdt

Apache Struts 2 2.3.x / 2.5.x Remote Code Execution Exploit

2017-03-12 00:00:00

Apache Struts Jakarta Multipart Parser OGNL Injection Exploit

2017-03-15 00:00:00

cve

CVE-2017-5638

2017-03-11 02:59:00

github

Apache Struts vulnerable to remote arbitrary command execution due to improper input validation

2018-10-18 19:24:26

The GitHub Security Lab’s journey to disclosing 500 CVEs in open source projects

2023-09-21 20:56:46

Bypassing OGNL sandboxes for fun and charities

2023-01-27 16:00:49

cloudfoundry

CVE-2017-5638: Apache Struts Remote Code Execution | Cloud Foundry

2017-03-14 00:00:00

huawei

Security Advisory - Apache Struts2 Remote Code Execution Vulnerability in Huawei Products

2017-03-16 00:00:00

cert

Apache Struts 2 is vulnerable to remote code execution

2017-03-14 00:00:00

nuclei

Apache Struts 2 - Remote Command Execution

2020-08-19 13:13:31

pentestit

UPDATE: Infection Monkey 1.6.1

2018-12-03 22:28:53

JexBoss: Java Deserialization Verification & EXploitation Tool!

2017-08-11 06:52:45

talosblog

2017 in Snort Signatures.

2018-01-29 11:37:00

Another Apache Struts Vulnerability Under Active Exploitation

2017-09-07 15:42:00

Cryptocurrency miners aren’t dead yet: Documenting the voracious but simple “Panda”

2019-09-17 08:09:45

nmap

http-vuln-cve2017-5638 NSE Script

2017-03-10 17:53:45

ics

Top 10 Routinely Exploited Vulnerabilities

2020-05-12 12:00:00

oracle

Oracle Critical Patch Update Advisory - April 2017

2017-04-18 00:00:00

Oracle Critical Patch Update Advisory - July 2017

2018-03-20 00:00:00

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

100.0%

JSON

Related for STRUTS_OGNL