Lucene search

K
cvelistApacheCVELIST:CVE-2017-9787
HistoryJul 13, 2017 - 12:00 a.m.

CVE-2017-9787

2017-07-1300:00:00
apache
www.cve.org

7.5 High

AI Score

Confidence

High

0.035 Low

EPSS

Percentile

91.6%

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.

CNA Affected

[
  {
    "product": "Apache Struts",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "2.3.x prior to 2.3.33"
      },
      {
        "status": "affected",
        "version": "2.5 to 2.5.10.1"
      }
    ]
  }
]

7.5 High

AI Score

Confidence

High

0.035 Low

EPSS

Percentile

91.6%