CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2017/10/30 2:29 p.m.•25 views

CVE-2016-3090

The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling...

8.8CVSS8.8AI score0.05663EPSS

SaveExploits0References4

UbuntuCve•added 2017/10/30 2:29 p.m.•30 views

CVE-2016-3090

The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling...

8.8CVSS7.6AI score0.05663EPSS

SaveExploits0References3

Cvelist•added 2017/10/30 2:0 p.m.•29 views

CVE-2016-3090

The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling...

8.8AI score0.05663EPSS

SaveExploits0References4

CVE•added 2017/10/30 2:0 p.m.•65 views

CVE-2016-3090

CVE-2016-3090 — Affected product and details : Apache Struts 2.x prior to 2.3.20 is vulnerable. The issue lies in the TextParseUtil.translateVariables method, exposed via a crafted OGNL expression using ANTLR tooling. Impact : remote code execution (RCE) with network access. Exploitation : attack...

8.8CVSS8.7AI score0.05663EPSS

SaveExploits0References4Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by