Vulnerabilites related to oracle - siebel_e-billing
cve-2016-3081
Vulnerability from cvelistv5
Published
2016-04-26 14:00
Modified
2024-08-05 23:40
Severity ?
EPSS score ?
Summary
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
References
▼ | URL | Tags |
---|---|---|
http://www.securitytracker.com/id/1035665 | vdb-entry, x_refsource_SECTRACK | |
https://struts.apache.org/docs/s2-032.html | x_refsource_CONFIRM | |
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en | x_refsource_CONFIRM | |
http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html | x_refsource_CONFIRM | |
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html | x_refsource_CONFIRM | |
http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec | x_refsource_MISC | |
https://www.exploit-db.com/exploits/39756/ | exploit, x_refsource_EXPLOIT-DB | |
http://www.securityfocus.com/bid/91787 | vdb-entry, x_refsource_BID | |
http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html | x_refsource_MISC | |
http://www.securityfocus.com/bid/87327 | vdb-entry, x_refsource_BID | |
http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec | x_refsource_MISC |
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-05T23:40:15.633Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { name: "1035665", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1035665", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://struts.apache.org/docs/s2-032.html", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", }, { name: "39756", tags: [ "exploit", "x_refsource_EXPLOIT-DB", "x_transferred", ], url: "https://www.exploit-db.com/exploits/39756/", }, { name: "91787", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/91787", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", }, { name: "87327", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/87327", }, { tags: [ "x_refsource_MISC", "x_transferred", ], url: "http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "n/a", vendor: "n/a", versions: [ { status: "affected", version: "n/a", }, ], }, ], datePublic: "2016-04-19T00:00:00", descriptions: [ { lang: "en", value: "Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.", }, ], problemTypes: [ { descriptions: [ { description: "n/a", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2019-08-12T20:45:53", orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", shortName: "redhat", }, references: [ { name: "1035665", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1035665", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://struts.apache.org/docs/s2-032.html", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { tags: [ "x_refsource_CONFIRM", ], url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { tags: [ "x_refsource_MISC", ], url: "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", }, { name: "39756", tags: [ "exploit", "x_refsource_EXPLOIT-DB", ], url: "https://www.exploit-db.com/exploits/39756/", }, { name: "91787", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/91787", }, { tags: [ "x_refsource_MISC", ], url: "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", }, { name: "87327", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/87327", }, { tags: [ "x_refsource_MISC", ], url: "http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "secalert@redhat.com", ID: "CVE-2016-3081", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "n/a", version: { version_data: [ { version_value: "n/a", }, ], }, }, ], }, vendor_name: "n/a", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "n/a", }, ], }, ], }, references: { reference_data: [ { name: "1035665", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1035665", }, { name: "https://struts.apache.org/docs/s2-032.html", refsource: "CONFIRM", url: "https://struts.apache.org/docs/s2-032.html", }, { name: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", refsource: "CONFIRM", url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { name: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", refsource: "CONFIRM", url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { name: "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", refsource: "MISC", url: "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", }, { name: "39756", refsource: "EXPLOIT-DB", url: "https://www.exploit-db.com/exploits/39756/", }, { name: "91787", refsource: "BID", url: "http://www.securityfocus.com/bid/91787", }, { name: "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", refsource: "MISC", url: "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", }, { name: "87327", refsource: "BID", url: "http://www.securityfocus.com/bid/87327", }, { name: "http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec", refsource: "MISC", url: "http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749", assignerShortName: "redhat", cveId: "CVE-2016-3081", datePublished: "2016-04-26T14:00:00", dateReserved: "2016-03-10T00:00:00", dateUpdated: "2024-08-05T23:40:15.633Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", }
Vulnerability from fkie_nvd
Published
2016-04-26 14:59
Modified
2024-11-21 02:49
Severity ?
Summary
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
References
Impacted products
{ configurations: [ { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*", matchCriteriaId: "5CF11DCF-6F6E-4E18-988E-E43918FBB8A6", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.1:*:*:*:*:*:*:*", matchCriteriaId: "BE3A90B7-C632-4D3E-9A4F-21E46D273B42", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*", matchCriteriaId: "386538BE-F258-4870-8E11-750ADA228026", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*", matchCriteriaId: "B4CF15B9-3714-4206-9971-1F7D59E20483", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*", matchCriteriaId: "DFA32D87-65C7-4589-86B7-500BE3203CFA", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*", matchCriteriaId: "98C3FB11-4E24-4067-A3A9-021F849DAAE3", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*", matchCriteriaId: "4DCF2D72-90F1-4D1B-94A2-5BB3D8C086C2", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*", matchCriteriaId: "661F1610-9FCD-4FC1-BCA1-69C58E0A1389", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*", matchCriteriaId: "D9C89E22-B106-4EAB-90A1-0EA86C165737", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*", matchCriteriaId: "6E1BABB2-780E-47E0-87A9-A164906C8421", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.10:*:*:*:*:*:*:*", matchCriteriaId: "AC32348E-7EF4-411C-9A44-CD041ABFA0E2", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*", matchCriteriaId: "94BD452B-AE41-4F7A-9DB9-4B1039582537", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*", matchCriteriaId: "ACFDC53B-7B8E-4333-BC87-E01024EC9C21", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*", matchCriteriaId: "9F0818E7-B617-4C30-BFAC-9FE2F375F8BD", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.12:*:*:*:*:*:*:*", matchCriteriaId: "50F4A58E-F3D4-4711-A37E-EA538B112371", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.13:*:*:*:*:*:*:*", matchCriteriaId: "EFFCC96F-FD87-4495-B8A5-19D7898D5662", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.0.14:*:*:*:*:*:*:*", matchCriteriaId: "DEA0424E-84B4-41BD-8E6C-93E2A77DD6CA", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.1.0:*:*:*:*:*:*:*", matchCriteriaId: "CEC53AE5-3640-4FE1-B0B1-EA26C5B9EB9B", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.1.1:*:*:*:*:*:*:*", matchCriteriaId: "662A2E4B-A76A-4498-98A6-F90DF65C62B7", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.1.2:*:*:*:*:*:*:*", matchCriteriaId: "4E720B3A-4CFB-47FE-B80C-67C59D4C7FD4", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.1.3:*:*:*:*:*:*:*", matchCriteriaId: "CA687B56-A09B-4741-84F1-2BD9569A3F76", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.1.4:*:*:*:*:*:*:*", matchCriteriaId: "0BC0E358-8B4D-480B-BFAE-966CB697310A", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.1.5:*:*:*:*:*:*:*", matchCriteriaId: "2B7E8E1C-C667-4AED-86A5-2BD0C62AAD76", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.1.6:*:*:*:*:*:*:*", matchCriteriaId: "88B3348C-1086-4A16-97E3-52DB65FF860A", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.1.8:*:*:*:*:*:*:*", matchCriteriaId: "3C65711D-9C5B-4644-A12D-82243CB6FB1E", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.1.8.1:*:*:*:*:*:*:*", matchCriteriaId: "FC1FA9A7-2C8E-4651-9400-190198528642", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.2.1:*:*:*:*:*:*:*", matchCriteriaId: "FA9093C0-AE6A-4285-B159-8FDBF37E33D7", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.2.1.1:*:*:*:*:*:*:*", matchCriteriaId: "267A1C33-1C95-41DA-8A01-6F20C7BE1772", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.2.3:*:*:*:*:*:*:*", matchCriteriaId: "7E4590B9-6A44-4DC6-B7DF-5E6CAAA9D25A", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.2.3.1:*:*:*:*:*:*:*", matchCriteriaId: "30860683-D403-4D24-B356-FD306AEFCA46", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.1:*:*:*:*:*:*:*", matchCriteriaId: "4E3316DA-9E34-4955-91CA-E35B141A7007", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.1.1:*:*:*:*:*:*:*", matchCriteriaId: "0D152B29-FAD5-4DEA-B187-278EBD37FEB4", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.1.2:*:*:*:*:*:*:*", matchCriteriaId: "2AC68463-F500-471C-8600-8F8FD9743B12", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.3:*:*:*:*:*:*:*", matchCriteriaId: "A92AAE08-4811-465A-8178-25F5F349B8BA", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.4:*:*:*:*:*:*:*", matchCriteriaId: "B487975D-6394-4136-B45C-C1F209465B24", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.4.1:*:*:*:*:*:*:*", matchCriteriaId: "BDC41957-8CCA-46A6-BD31-4039EEF3C457", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*", matchCriteriaId: "443B4E64-2A36-49C6-B09D-77B3BDF69709", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*", matchCriteriaId: "2481505C-4FD1-4195-9E10-9DD741498FB2", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*", matchCriteriaId: "28ED63DB-2AAF-4BC9-A844-074EDF63C89A", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*", matchCriteriaId: "38A6CEED-6C43-4325-B36C-9F254CCDFDC0", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*", matchCriteriaId: "41F43088-26AA-4890-A9D6-1B9B48D5F02A", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*", matchCriteriaId: "BE6820E3-8FDF-4BDF-8B62-E604A91F1280", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*", matchCriteriaId: "D25ED06A-F12C-443E-9B3F-FDDF52FE9D93", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*", matchCriteriaId: "44527919-8403-42A8-9CE1-3B4F58630F34", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*", matchCriteriaId: "EBB91D8A-14B8-4263-B90D-F776535F9B8F", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*", matchCriteriaId: "FB525941-7175-43C1-9F17-814F5F7C72CA", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*", matchCriteriaId: "F10D559E-04A0-4002-947C-D3902138795B", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*", matchCriteriaId: "89203DD8-2C95-4546-9504-83654FFA5DBC", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*", matchCriteriaId: "EB3D5644-CFAC-4FB5-A1FB-387F97876098", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*", matchCriteriaId: "1225A0B0-C3F2-4579-BFE9-F8DB2CF596F6", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*", matchCriteriaId: "8DC883A7-0766-4857-ABC8-9DB4BA713650", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*", matchCriteriaId: "22FF6282-0BCA-46EB-9648-6EE3EDA189F2", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*", matchCriteriaId: "6D1467BC-9BC8-402D-A420-615CF9698648", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:*", matchCriteriaId: "524C5119-416D-413B-BF1D-29291E23FDB2", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:*", matchCriteriaId: "45446B16-F531-4C6D-B889-A8A6622C70A2", vulnerable: true, }, { criteria: "cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*", matchCriteriaId: "C778ADED-75B5-4AD3-8CDC-EFDFFAD5A742", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, { nodes: [ { cpeMatch: [ { criteria: "cpe:2.3:a:oracle:siebel_e-billing:7.1:*:*:*:*:*:*:*", matchCriteriaId: "FB16FA05-8486-4E04-9745-0EE28458FDA0", vulnerable: true, }, ], negate: false, operator: "OR", }, ], }, ], cveTags: [], descriptions: [ { lang: "en", value: "Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.", }, { lang: "es", value: "Apache Struts versiones 2.3.19 hasta 2.3.20.2, versiones 2.3.21 hasta 2.3.24.1 y versiones 2.3.25 hasta 2.3.28, cuando Dynamic Method Invocation está habilitado, permite a atacantes remotos ejecutar código arbitrario por medio del prefijo method:, relacionado con expresiones encadenadas.", }, ], id: "CVE-2016-3081", lastModified: "2024-11-21T02:49:19.503", metrics: { cvssMetricV2: [ { acInsufInfo: false, baseSeverity: "HIGH", cvssData: { accessComplexity: "MEDIUM", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "COMPLETE", baseScore: 9.3, confidentialityImpact: "COMPLETE", integrityImpact: "COMPLETE", vectorString: "AV:N/AC:M/Au:N/C:C/I:C/A:C", version: "2.0", }, exploitabilityScore: 8.6, impactScore: 10, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, source: "nvd@nist.gov", type: "Primary", userInteractionRequired: false, }, ], cvssMetricV30: [ { cvssData: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.1, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, exploitabilityScore: 2.2, impactScore: 5.9, source: "nvd@nist.gov", type: "Primary", }, ], }, published: "2016-04-26T14:59:02.207", references: [ { source: "secalert@redhat.com", tags: [ "Exploit", "Third Party Advisory", ], url: "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", }, { source: "secalert@redhat.com", url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", }, { source: "secalert@redhat.com", tags: [ "Patch", "Third Party Advisory", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { source: "secalert@redhat.com", tags: [ "Vendor Advisory", ], url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { source: "secalert@redhat.com", tags: [ "Third Party Advisory", ], url: "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", }, { source: "secalert@redhat.com", url: "http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec", }, { source: "secalert@redhat.com", url: "http://www.securityfocus.com/bid/87327", }, { source: "secalert@redhat.com", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/91787", }, { source: "secalert@redhat.com", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1035665", }, { source: "secalert@redhat.com", tags: [ "Patch", "Vendor Advisory", ], url: "https://struts.apache.org/docs/s2-032.html", }, { source: "secalert@redhat.com", url: "https://www.exploit-db.com/exploits/39756/", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Exploit", "Third Party Advisory", ], url: "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Third Party Advisory", ], url: "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Vendor Advisory", ], url: "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", ], url: "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "http://www.securityfocus.com/bid/87327", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/91787", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1035665", }, { source: "af854a3a-2127-422b-91ae-364da2661108", tags: [ "Patch", "Vendor Advisory", ], url: "https://struts.apache.org/docs/s2-032.html", }, { source: "af854a3a-2127-422b-91ae-364da2661108", url: "https://www.exploit-db.com/exploits/39756/", }, ], sourceIdentifier: "secalert@redhat.com", vulnStatus: "Modified", weaknesses: [ { description: [ { lang: "en", value: "CWE-77", }, ], source: "nvd@nist.gov", type: "Primary", }, ], }