Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:7786
HistoryNov 14, 2018 - 2:32 a.m.

Denial Of Service (DoS)

2018-11-1402:32:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

JSON

Apache Struts is vulnerable to denial of service. A remote attacker is able to cause a denial of service condition using a multipart/form-data encoded form with a parameter name that references the getMultipartRequestHandler function which provides access to elements in CommonsMultipartRequestHandler and BeanUtils.

CPENameOperatorVersion
strutsle1.2.8

Related

attackerkb 1
checkpoint_advisories 1
prion 1
nessus 1
cve 1
github 1
cisa_kev 1
osv 1
ubuntucve 1
threatpost 1
openvas 2
redhat 1
cisa 1
ibm 1
attackerkb
attackerkb
CVE-2006-1547
2006-03-30 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Struts Denial of Service (CVE-2006-1547)
2022-03-01 00:00:00
prion
prion
Information disclosure
2006-03-30 22:02:00
nessus
nessus
Apache Struts 1.x < 1.2.9 Denial of Service (CVE-2006-1547)
2023-01-30 00:00:00
cve
cve
CVE-2006-1547
2006-03-30 22:02:00
github
github
Improper Input Validation in Apache Struts
2022-05-01 06:50:42
cisa_kev
cisa_kev
Apache Struts 1 ActionForm Denial-of-Service Vulnerability
2022-01-21 00:00:00
osv
osv
Improper Input Validation in Apache Struts
2022-05-01 06:50:42
ubuntucve
ubuntucve
CVE-2006-1547
2006-03-30 00:00:00
threatpost
threatpost
Skeletons in the Closet: Security 101 Takes a Backseat to 0-days
2022-04-22 10:56:16
openvas
openvas
Apache Struts Security Update (CVE-2006-1546, CVE-2006-1547, CVE-2006-1548)
2021-09-16 00:00:00
Apache Struts XSS Vulnerability (CVE-2006-1546, CVE-2006-1547, CVE-2006-1548)
2021-09-16 00:00:00
redhat
redhat
(RHSA-2006:0281) struts security update for Red Hat Application Server
2006-05-03 00:00:00
cisa
cisa
CISA Adds Four Known Exploited Vulnerabilities to Catalog
2022-01-21 00:00:00
ibm
ibm
Security Bulletin: Multiple CVEs affect IBM Integration Designer
2023-02-01 19:40:57

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

JSON
Related for VERACODE:7786
attackerkb1checkpoint_advisories1prion1nessus1cve1github1cisa_kev1osv1ubuntucve1threatpost1openvas2redhat1cisa1ibm1