Oracle Hyperion Common Security (Apache Struts) CVEs

Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 100.0% No exploit published 0 0.0%

Critical 1 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 1 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 1 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%

split by StatusSeverityProtectionExploit maturity peak 1 / month

Dec 231 Mitigation candidate1 Critical1 not blocked1 Exploited1

Dec 23

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2023-50164	Critical	2023-12-07	Mitigation candidate	Exploited	An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2023-50164

Critical

2023-12-07

Mitigation candidate

Exploited

An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can be used to perform Remote Code Execution. Users are recommended to upgrade to versions Struts 2.5.33 or Struts 6.3.0.2 or greater to fix this issue.