WaratekVRT Sign in
Reset
More filters (2)
Columns
Published to 2012-05-31✕Product: Struts✕
Overview 3 matches · 2 protected · 1 exploited · 1 CISA KEV · 0 public PoC · 1 EPSS ≥ 0.5
3matches 2protected66.7% 1exploited33.3% 1CISA KEV33.3% 0public PoC0.0% 1EPSS ≥ 0.533.3%
Protected by Waratek 2 66.7% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 33.3%
Critical 0 0.0% High 3 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 66.7% partly blocked 0 0.0% not blocked 1 33.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 33.3% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 66.7%
split by peak 2 / year
No exploit published: 1Protected by Waratek: 2 High: 3 not blocked: 1blocked by ARMR today: 2 No public exploit: 2Exploited: 1
20062 Protected by Waratek2 High2 blocked by ARMR today2 Exploited1 No public exploit1 20070 20080 20090 20100 20110 20121 No exploit published1 High1 not blocked1 No public exploit1
2006200720082009201020112012
3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2012-0838 High 2012-03-02 No exploit published No public exploit Apache Struts 2 before 2.2.3.1 evaluates a string as an OGNL expression during the handling of a conversion error, which allows remote attackers to modify run-time data values, and consequently execute arbitrary code, via invalid input to a field.
CVE-2006-1547 High 2006-03-30 Protected by Waratek Exploited ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.
CVE-2006-1546 High 2006-03-30 Protected by Waratek No public exploit Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check.