{"vulnerability": "CVE-2012-0391", "sightings": [{"uuid": "bc9fa7bf-a82c-4aa1-b9cb-e951346d7b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0391", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "b330ea7b-1b8a-4dc1-99af-e78fdbd9594a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0391", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971226", "content": "", "creation_timestamp": "2024-12-24T20:26:10.004674Z"}, {"uuid": "2d464606-4393-4890-82c7-a60d7a80f00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0391", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "9c8093f9-39d8-40ab-aaff-4e33a87763ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0391", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:01.000000Z"}, {"uuid": "817664e5-4bdd-4fb3-8142-7b477e4b90bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0391", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:02.000000Z"}, {"uuid": "a4cdf412-1290-4192-9414-b5603fbfffcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0391", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts_code_exec_exception_delegator.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "42ee55d9-1343-4234-a922-e106d0e7cd82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0391", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/18984", "content": "", "creation_timestamp": "2012-06-05T00:00:00.000000Z"}, {"uuid": "0df72793-010d-48cf-813b-ab45ef2160d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2012-0391", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d2c649d-8ced-4776-a4b6-9a3eddf772ca", "content": "", "creation_timestamp": "2026-02-02T12:28:26.658359Z"}, {"uuid": "073d860f-9eff-4ab0-bd2a-02361bf8c683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0391", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/18329", "content": "", "creation_timestamp": "2012-01-06T00:00:00.000000Z"}, {"uuid": "e36755b0-30de-460d-895c-a53ca502c564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0391", "type": "seen", "source": "Telegram/tyKSl6CwZRUty6NzwcIVuJLntXkn74dEYyIINZVin6vi5GFF", "content": "", "creation_timestamp": "2025-02-14T10:00:35.000000Z"}, {"uuid": "f190958d-1697-406f-8515-9bb4faeed0b3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0391", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/28f9f2b5-d5fa-4fb0-b960-178e6baea7fe", "content": "", "creation_timestamp": "2026-06-19T12:47:40.826143Z"}, {"uuid": "a39d3865-66fe-48fb-9a17-b459515e130c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0391", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6782691f-66c2-49eb-8e42-ab2d734ac1c9", "content": "", "creation_timestamp": "2026-06-23T14:04:54.566272Z"}, {"uuid": "f89d20c6-02f2-473e-833c-0e1fc64dddde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0391", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts_code_exec_exception_delegator.rb", "content": "{\"aliases\": [], \"arch\": \"x86, java\", \"author\": [\"Johannes Dahse\", \"Andreas Nusser\", \"juan vazquez \", \"sinn3r \", \"mihi\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a remote command execution vulnerability in\\n          Apache Struts versions < 2.2.1.1. This issue is caused because the\\n          ExceptionDelegator interprets parameter values as OGNL expressions\\n          during certain exception handling for mismatched data types of properties,\\n          which allows remote attackers to execute arbitrary Java code via a\\n          crafted parameter.\", \"disclosure_date\": \"2012-01-06\", \"fullname\": \"exploit/multi/http/struts_code_exec_exception_delegator\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"Apache Struts Remote Command Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/struts_code_exec_exception_delegator.rb\", \"platform\": \"Java,Linux,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/struts_code_exec_exception_delegator\", \"references\": [\"CVE-2012-0391\", \"OSVDB-78277\", \"EDB-18329\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Windows Universal\", \"Linux Universal\", \"Java Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:14.771272Z"}]}