Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2016-3081

Struts2: RCE via method: prefix when Dynamic Method Invocation is enabled (S2-032)

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.

CVSS 3.1 · 8.1 High EPSS 96.9% KEV · Listed
Vendors
Apache Huawei Oracle
Products
Struts Agile Controller-campus Agile Controller-campus Firmware and 31 more