Improper Input Validation in Apache Struts

🗓️ 13 May 2022 01:25:20Reported by GitHub Advisory DatabaseType

github

github🔗 github.com👁 38 Views

Improper Input Validation in Apache Struts 1.x through 1.3.10 ActionServlet.jav

Reporter	Title	Published	Views	Family All 118
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts 1.1 Vulnerabilities in IBM Library Support for Struts	16 Jan 202609:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Process Manager shipped with IBM Cloud Orchestrator and IBM SmartCloud Orchestrator	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache Struts might affect IBM Business Process Manager and WebSphere Lombardi Edition (CVE-2016-1181, CVE-2016-1182, CVE-2015-0899)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Struts has been identified in IBM WebSphere Application Server shipped with IBM Workload Deployer (CVE-2016-1181 and CVE-2016-1182)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM License Metric Tool and IBM Tivoli Asset Discovery for Distributed (CVE-2016-1181 and CVE-2016-1182)	26 Apr 202121:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Apache Struts Vulnerabilities Affect IBM Sterling File Gateway	5 Feb 202000:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Struts affect IBM Systems Director (ISD) Server (CVE-2016-1181, CVE-2016-1182)	18 Jun 201801:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2016-1181 and CVE-2016-1182)	22 Sep 202203:02	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSource Apache Struts vulnerabilities in IBM Content Collector for File Systems	17 Jun 201812:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Struts v2 affect IBM Spectrum Control (formerly Tivoli Storage Productivity Center) CVE-2016-1181, CVE-2016-1182	22 Feb 202219:50	–	ibm

Vulners

Node

OR

org_apache_struts struts_coreRange≤1.2.9maven

org.apache.struts struts-coreRange≤1.3.10maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2016-1181
github	www.github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security-tracker	www.security-tracker.debian.org/tracker/CVE-2016-1181
oracle	www.oracle.com/security-alerts/cpujan2020.html
oracle	www.oracle.com/security-alerts/cpujul2020.html
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
oracle	www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
oracle	www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
jvn	www.jvn.jp/en/jp/JVN03188560/index.html

13 Oct 2025 12:03Current

8.3High risk

Vulners AI Score8.3

CVSS 26.8

CVSS 38.1

EPSS0.13122

apache struts input validation actionservlet remote attackers arbitrary code denial of service memory access cve-2015-0899 software