Lucene search

CVE-2017-9805

🗓️ 15 Sep 2017 19:00:00Reported by apacheType

Apache Struts 2.X REST Plugin Remote Code Executio

Reporter	Title	Published	Views	Family All 84
CISA	Oracle Patches Apache Vulnerabilities	25 Sep 201700:00	–	cisa
OSV	REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering	16 Oct 201819:37	–	osv
OSV	CVE-2017-9805	15 Sep 201719:29	–	osv
OSV	Apache Struts Improper Input Validation vulnerability	16 Oct 201819:36	–	osv
OSV	CVE-2017-9793	20 Sep 201717:29	–	osv
OSV	The REST Plugin in Apache Struts is using an outdated XStream library	16 Oct 201819:37	–	osv
OSV	CVE-2017-12611	20 Sep 201717:29	–	osv
OSV	CVE-2017-7672	13 Jul 201715:29	–	osv
OSV	CVE-2017-9791	10 Jul 201716:29	–	osv
OSV	Spring AOP functionality (Struts) vulnerable to DoS attack	16 Oct 201819:37	–	osv

[
  {
    "product": "Apache Struts",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Struts before 2.3.34 and 2.5.x before 2.5.13"
      }
    ]
  }
]

Source	Link
struts	www.struts.apache.org/docs/s2-052.html
securityfocus	www.securityfocus.com/bid/100609
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lgtm	www.lgtm.com/blog/apache_struts_CVE-2017-9805
security	www.security.netapp.com/advisory/ntap-20170907-0001/
oracle	www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html
cwiki	www.cwiki.apache.org/confluence/display/WW/S2-052
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2
exploit-db	www.exploit-db.com/exploits/42627/
kb	www.kb.cert.org/vuls/id/112992

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Sep 2017 19:00Current

8.5High risk

Vulners AI Score8.5

EPSS0.975