SUSE CVE-2016-4003

🗓️ 15 Feb 2023 05:04:01Reported by Suse CVEType

XSS in URLDecoder (JRE before 1.8) used by Struts 2 before 2.3.28 with single byte encoding enables remote script injection.

Reporter	Title	Published	Views	Family All 22
IBM Security Bulletins	Security Bulletin: OPEN Source Apache Struts Vulnerabilities IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, and Platform HPC (CVE-2016-4003)	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin:Multiple vulnerabilities in IBM JRE affect IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, and Platform HPC(CVE-2016-4003)	18 Jun 201801:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Call Center and Apache Struts Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Order Management Apache Struts upgrade strategy (various CVEs, see below)	14 Sep 202217:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Struts affects IBM Social Media Analytics (CVE-2016-4003)	15 Jun 201822:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Struts affect IBM InfoSphere Information Server	16 Jun 201813:42	–	ibm
BDU FSTEC	The vulnerability of the URLDecoder class implementation in the Java Runtime Environment and the Java Development Kit application development tools allows attackers to perform cross-site scripting attacks.	21 Sep 202200:00	–	bdu_fstec
CNVD	Apache Struts Oracle JRE Cross-Site Scripting Vulnerability	16 Apr 201600:00	–	cnvd
CVE	CVE-2016-4003	12 Apr 201616:00	–	cve
Cvelist	CVE-2016-4003	12 Apr 201616:00	–	cvelist