Medium
CVE-2012-0393
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 60
Reset filters
High
CVE-2012-1592
Unrestricted Upload of File with Dangerous Type in Apache Struts2
Critical
CVE-2011-3923
Struts ParameterInterceptor vulnerability allows remote command execution
Critical
CVE-2021-31805
Expression Language Injection in Apache Struts
Critical
Exploited in attacks
CVE-2020-17530
Remote code execution in Apache Struts
Critical
CVE-2019-0230
Improperly Controlled Modification of Dynamically-Determined Object Attributes in Apache Struts
High
Exploited in attacks
CVE-2018-11776
Apache Struts vulnerable to remote command execution (RCE) due to improper input validation
Critical
Exploited in attacks
CVE-2017-5638
Apache Struts vulnerable to remote arbitrary command execution due to improper input validation
High
CVE-2017-9804
Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used
High
CVE-2017-9787
Spring AOP functionality (Struts) vulnerable to DoS attack
Medium
CVE-2017-7672
Apache Struts Improper Input Validation vulnerability
Critical
CVE-2017-12611
Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.