K93135205: Apache Struts 2 vulnerability CVE-2016-4436

Security Advisory Description Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up. CVE-2016-4436 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status...

SUSE CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...

be.objectify:objectify-struts2-tags (=1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0 <=2.0.8) +223 more potentially affected by CVE-2016-4436 via org.apache.struts:struts2-core (>=2.0.11 <=2.3.28.1)

org.apache.struts:struts2-core MAVEN version =2.0.11, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =0.5.9, =1.2.0, =1.0.0, =1.2.6 and more Source cves: CVE-2016-4436 Source advisory: OSV:GHSA-XM92-V2MQ-842Q...

org.apache.struts:struts2-apps (>=2.5-BETA1 <=2.5-BETA3), org.apache.struts:struts2-assembly (>=2.5-BETA1 <=2.5-BETA3) +33 more potentially affected by CVE-2016-4436 via org.apache.struts:struts2-core (>=2.5-BETA1 <=2.5-BETA3)

org.apache.struts:struts2-core MAVEN version =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA1, =2.5-BETA3 and more Source cves: CVE-2016-4436 Source...

Security Bulletin: IBM Sterling Order Management is affected by Apache Struts 2 security vulnerabilities (CVE-2016-3093 , CVE-2016-4436)

Summary IBM Sterling Order Management uses Apache Struts 2 and is affected by some of the vulnerabilities that exist in Apache Struts 2 Vulnerability Details CVEID: CVE-2016-3093 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by the improper implementation of cache used t...

Apache Struts Security Update (S2-035)

Apache Struts is prone to an unspecified vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

Apache Struts Unspecified Vulnerability (S2-035) - Linux

Apache Struts is prone to an unspecified vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2016-4436

Summary of CVE-2016-4436 : Apache Struts 2 is affected by an unspecified impact vulnerability due to improper action name cleanup. The CVE entry covers versions 2.3. before 2.3.29 and 2.5.x before 2.5.1. Connected IBM and IBM-related advisories explicitly reference this CVE and reiterate that upg...

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...