14 matches found
SUSE CVE-2017-9793
The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload...
Apache Struts Security Update (S2-051, S2-052) - Version Check
Apache Struts is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
org.apache.struts:struts2-assembly (>=2.2.1, <=2.3.33), org.apache.struts:struts2-rest-showcase (>=2.1.2, <=2.3.33) +5 more potentially affected by CVE-2017-9793 via org.apache.struts:struts2-rest-plugin (>=2.1.2, <=2.3.33)
org.apache.struts:struts2-rest-plugin MAVEN version =2.1.2, =2.2.1, =2.1.2, =2.0-rc2.3, =1.0, =1.0.1 - org.meruvian.yama:yama-struts-core 1.0.1 Source cves: CVE-2017-9793 Source advisory: OSV:GHSA-VWXJ-6M5M-RRVH...
org.apache.struts:struts2-assembly (>=2.2.1, <=2.3.33), org.apache.struts:struts2-rest-showcase (>=2.1.2, <=2.3.33) +5 more potentially affected by CVE-2017-9793 via org.apache.struts:struts2-rest-plugin (>=2.1.2, <=2.3.33)
org.apache.struts:struts2-rest-plugin MAVEN version =2.1.2, =2.2.1, =2.1.2, =2.0-rc2.3, =1.0, =1.0.1 - org.meruvian.yama:yama-struts-core 1.0.1 Source cves: CVE-2017-9793 Source advisory: GHSA-VWXJ-6M5M-RRVH...
Security Bulletin: IBM OpenPages GRC Platform Web Applications are NOT vulnerable to (CVE-2017-9805 , CVE-2017-9804, CVE-2017-9793)
Summary IBM OpenPages GRC Platform Web Applications are NOT vulnerable to Apache Struts 2 vulnerabilities CVE-2017-9805 , CVE-2017-9804 and CVE-2017-9793 Vulnerability Details For more information on Struts 2 vulnerabilities, please consult Apache Security Bulletins CVE-2017-9805 , CVE-2017-9804...
Apache Struts2 REST Plugin XStream DoS (CVE-2017-9793) - Ver2
A vulnerability exists in Apache. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
Oracle WebLogic Server Multiple Vulnerabilities
Binary data oracleweblogicserverCVE-2017-9805.nbin...
CVE-2017-9793
The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload...
CVE-2017-9793
The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload...
CVE-2017-9793
The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload...
CVE-2017-9793
CVE-2017-9793 affects Apache Struts 2 REST plugin in 2.1.x and 2.3.x/2.5.x branches where an outdated XStream library is used, enabling DoS via a crafted XML payload during deserialization. The related connected sources corroborate a broader issue with the Struts REST plugin using XStream without...
CVE-2017-9793
The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload...
org.apache.struts:struts2-assembly (>=2.2.1, <=2.3.33), org.apache.struts:struts2-rest-showcase (>=2.1.2, <=2.3.33) +5 more potentially affected by CVE-2017-9793 via org.apache.struts:struts2-rest-plugin (>=2.1.2, <=2.3.33)
org.apache.struts:struts2-rest-plugin MAVEN version =2.1.2, =2.2.1, =2.1.2, =2.0-rc2.3, =1.0, =1.0.1 - org.meruvian.yama:yama-struts-core 1.0.1 Source cves: CVE-2017-9793 Source advisory: MEND:CVE-2017-9793...
Apache Struts 2 REST Plugin XStream Denial of Service (CVE-2017-9793)
A denial-of-service vulnerability exists in the Apache Struts 2 REST plugin. The vulnerability is due improper validation of XML input by the XStream library, during the deserialization process. A remote attacker could exploit this vulnerability by sending a crafted XML payload to the target serv...