11 matches found
K93135205: Apache Struts 2 vulnerability CVE-2016-4436
Security Advisory Description Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up. CVE-2016-4436 Impact There is no impact; F5 products are not affected by this vulnerability. Security Advisory Status...
SUSE CVE-2016-4436
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up...
be.objectify:objectify-struts2-tags (1.0), br.net.woodstock.rockframework:rockframework-struts2 (>=2.0.0, <=2.0.8) +239 more potentially affected by CVE-2016-4436 via org.apache.struts:struts2-core (>=2.0.5, <=2.3.28.1)
org.apache.struts:struts2-core MAVEN version =2.0.5, =2.0.0, =1.2.1, =1.5.3, =1.5.3, =1.2.2, =1.2.2, =1.2.2, =1.2.2, =1.0, =1.0, =1.0, =1.0, =1.0.4 and more Source cves: CVE-2016-4436 Source advisory: OSV:GHSA-XM92-V2MQ-842Q...
com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin (2.0.0), com.amashchenko.struts2.pdfstream:struts2-pdfstream-showcase (2.0.0) +38 more potentially affected by CVE-2016-4436 via org.apache.struts:struts2-core (>=2.5-beta1, <=2.5)
org.apache.struts:struts2-core MAVEN version =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5 and more Source cves: CVE-2016-4436 Source advisory: OSV:GHSA-XM92-V2MQ-842Q...
com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin (2.0.0), com.amashchenko.struts2.pdfstream:struts2-pdfstream-showcase (2.0.0) +38 more potentially affected by CVE-2016-4436 via org.apache.struts:struts2-core (>=2.5-beta1, <=2.5)
org.apache.struts:struts2-core MAVEN version =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5 and more Source cves: CVE-2016-4436 Source advisory: GHSA-XM92-V2MQ-842Q...
Security Bulletin: IBM Sterling Order Management is affected by Apache Struts 2 security vulnerabilities (CVE-2016-3093 , CVE-2016-4436)
Summary IBM Sterling Order Management uses Apache Struts 2 and is affected by some of the vulnerabilities that exist in Apache Struts 2 Vulnerability Details CVEID: CVE-2016-3093 DESCRIPTION: Apache Struts is vulnerable to a denial of service, caused by the improper implementation of cache used t...
Apache Struts Security Update (S2-035)
Apache Struts is prone to an unspecified vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...
Apache Struts Unspecified Vulnerability (S2-035) - Linux
Apache Struts is prone to an unspecified vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2016-4436
Summary of CVE-2016-4436 : Apache Struts 2 is affected by an unspecified impact vulnerability due to improper action name cleanup. The CVE entry covers versions 2.3. before 2.3.29 and 2.5.x before 2.5.1. Connected IBM and IBM-related advisories explicitly reference this CVE and reiterate that upg...
com.amashchenko.struts2.pdfstream:struts2-pdfstream-plugin (2.0.0), com.amashchenko.struts2.pdfstream:struts2-pdfstream-showcase (2.0.0) +38 more potentially affected by CVE-2016-4436 via org.apache.struts:struts2-core (>=2.5-beta1, <=2.5)
org.apache.struts:struts2-core MAVEN version =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5-beta1, =2.5 and more Source cves: CVE-2016-4436 Source advisory: MEND:CVE-2016-4436...