Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 101

Export CSV
CVE-2011-3923

struts2: Remote code execution via OGNL injention in HTTP parameter values

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

CVSS 3.1 · 9.8 Critical EPSS 89.5% KEV · Not listed
Vendors
Apache Redhat
Products
Struts Jboss Enterprise Web Server