CVE-2021-31805

🗓️ 12 Apr 2022 15:25:11Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 336 Views

CVE-2021-31805: Incomplete fix in Apache Struts 2.0.0 - 2.5.29 enables Remote Code Execution

Reporter	Title	Published	Views	Family All 53
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	8 Nov 202216:20	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2021-31805 may affect Apache Struts used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections	9 Jun 202207:32	–	ibm
IBM Security Bulletins	Security Bulletin: Order Management could be subject to an Apache Struts vulnerability that could allow a remote attacker to execute arbitrary code on the system.	12 Apr 202417:44	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2021-31805 may affect Apache Struts used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections	9 Jun 202208:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Apache Struts Affect IBM eDiscovery Manager	12 Jul 202310:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Struts affect IBM Tivoli Application Dependency Discovery Manager. (CVE-2021-31805)	18 Nov 202212:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Struts library affect Tivoli Netcool/OMNIbus WebGUI (CVE-2021-31805)	27 Jun 202203:47	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.6 contains fixes for multiple security vulnerabilities.	25 Oct 202213:11	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2021-31805 may affect Apache Struts used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections	9 Jun 202208:06	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2021-31805 may affect Apache Struts used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections	9 Jun 202208:07	–	ibm

NVD

Vulners

Node

apache strutsRange2.0.0–2.5.29

[
  {
    "product": "Apache Struts",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.0 to 2.5.29"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujul2022.html
openwall	www.openwall.com/lists/oss-security/2022/04/12/6
cwiki	www.cwiki.apache.org/confluence/display/WW/S2-062
security	www.security.netapp.com/advisory/ntap-20220420-0001/

21 Nov 2024 06:06Current

9.8High risk

Vulners AI Score9.8

CVSS 27.5

CVSS 3.19.8

EPSS0.93788