Lucene search
+L

17 matches found

Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•17 views

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: struts (UTSA-2026-031330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-031330 advisory. The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page...

7.5CVSS7.2AI score0.21261EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 5:22 a.m.•11 views

SUSE CVE-2015-0899

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...

7.5CVSS7.6AI score0.21261EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2022/05/14 3:15 a.m.•48 views

Improper Input Validation in Apache Struts

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...

7.5CVSS7.5AI score0.21261EPSS
SaveExploits0References8Affected Software2
Tenable Nessus
Tenable Nessus
•added 2020/10/30 12:00 a.m.•43 views

IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.14 / 9.x < 9.0.0.8 Security Bypass (CVE-2015-0899)

The IBM WebSphere Application Server running on the remote host is version 7.0.0.x through 7.0.0.45, 8.0.0.x through 8.0.0.15, 8.5.0.x prior to 8.5.5.14, or 9.x prior to 9.0.0.8. It is, therefore, affected by a vulnerability in the Apache Struts subcomponent deu to an error in the...

7.5CVSS7.5AI score0.21261EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2018/11/28 11:45 a.m.•37 views

Security Bulletin: Potential vulnerability in WebSphere Application Server shipped with Tivoli Integrated Portal (CVE-2015-0899)

Summary There is a potential vulnerability in WebSphere Application Server. Vulnerability Details CVEID: CVE-2015-0899 DESCRIPTION: Apache Struts could allow a remote attacker to bypass security restrictions, caused by an error in the MultiPageValidator implementation. An attacker could exploit...

7.5CVSS1.4AI score0.21261EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2018/06/15 7:06 a.m.•57 views

Security Bulletin: Security vulnerabilities in Apache Struts might affect IBM Business Process Manager and WebSphere Lombardi Edition (CVE-2016-1181, CVE-2016-1182, CVE-2015-0899)

Summary Multiple security vulnerabilities have been reported for Apache Struts that is used by IBM Business Process Manager and WebSphere Lombardi Edition. Vulnerability Details CVEID: CVE-2016-1181 DESCRIPTION: Apache Struts could allow a remote attacker to execute arbitrary code on the system,...

8.2CVSS7.9AI score0.25737EPSS
SaveExploits0Affected Software4
OpenVAS
OpenVAS
•added 2016/11/18 12:00 a.m.•40 views

Apache Struts 1.x - 1.3.10 Multiple Vulnerabilities - Windows

Apache Struts is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.2CVSS8.3AI score0.25737EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2016/07/19 12:00 a.m.•10 views

The vulnerability of the Apache Struts software platform, which allows attackers to circumvent existing access restrictions

The vulnerability of the MultiPageValidator implementation in the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to bypass existing access restrictions by modifying page parameters remotely...

5CVSS7.1AI score0.21261EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2016/07/04 10:59 p.m.•29 views

Information disclosure

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...

5CVSS6.8AI score0.21261EPSS
SaveExploits0References7Affected Software1
UbuntuCve
UbuntuCve
•added 2016/07/04 10:59 p.m.•31 views

CVE-2015-0899

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...

7.5CVSS7.2AI score0.21261EPSS
SaveExploits0References4
NVD
NVD
•added 2016/07/04 10:59 p.m.•36 views

CVE-2015-0899

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...

7.5CVSS7.4AI score0.21261EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2016/07/04 10:00 p.m.•37 views

CVE-2015-0899

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...

7.4AI score0.21261EPSS
SaveExploits0References7
Mend
Mend
•added 2016/07/04 10:00 p.m.•1 views

CVE-2015-0899

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...

8.7CVSS0.21261EPSS
SaveExploits0References11
CVE
CVE
•added 2016/07/04 10:00 p.m.•209 views

CVE-2015-0899

CVE-2015-0899 affects Apache Struts 1.x (1.1–1.3.10) where the MultiPageValidator allows remote bypass of access restrictions via a modified page parameter. IBM advisories (IBM Library Support for Struts 1.3.16 remediation, and related IBM bulletins) confirm this family of vulnerabilities and lis...

7.5CVSS7.4AI score0.21261EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/07/04 12:00 a.m.•5 views

CVE-2015-0899: Improper Input Validation

The MultiPageValidator implementation in Apache Struts 1 1.1 through 1.3.10 allows remote attackers to bypass intended access restrictions via a modified page parameter...

7.5CVSS7.3AI score0.21261EPSS
SaveExploits0References2
CNVD
CNVD
•added 2015/05/15 12:00 a.m.•9 views

Apache Struts Security Restriction Bypass Vulnerability

Apache Struts is an open source architecture for building Java web applications. An input validation bypass vulnerability exists in the MultiPageValidator function in Apache Struts versions prior to 1.2.9 SP2. An attacker can exploit this vulnerability to bypass security restrictions and perform...

7.5CVSS6.9AI score0.21261EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2015/05/15 12:00 a.m.•3 views

PT-2016-2330

Name of the Vulnerable Software and Affected Versions Apache Struts versions 1.1 through 1.3.10 Description The issue allows remote attackers to bypass intended access restrictions. This is due to insufficient input validation in the MultiPageValidator implementation. The exploitation can occur...

7.5CVSS0.21261EPSS
SaveExploits0References17
Rows per page
Query Builder