9.8

CVE-2016-4436

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.

Data is provided by the National Vulnerability Database (NVD)
Apache ≫ Struts Version2.0.0
Apache ≫ Struts Version2.0.1
Apache ≫ Struts Version2.0.2
Apache ≫ Struts Version2.0.3
Apache ≫ Struts Version2.0.4
Apache ≫ Struts Version2.0.5
Apache ≫ Struts Version2.0.6
Apache ≫ Struts Version2.0.7
Apache ≫ Struts Version2.0.8
Apache ≫ Struts Version2.0.9
Apache ≫ Struts Version2.0.11
Apache ≫ Struts Version2.0.11.1
Apache ≫ Struts Version2.0.11.2
Apache ≫ Struts Version2.0.12
Apache ≫ Struts Version2.0.14
Apache ≫ Struts Version2.1.6
Apache ≫ Struts Version2.1.8
Apache ≫ Struts Version2.1.8.1
Apache ≫ Struts Version2.2.1
Apache ≫ Struts Version2.2.1.1
Apache ≫ Struts Version2.2.3
Apache ≫ Struts Version2.2.3.1
Apache ≫ Struts Version2.3.1
Apache ≫ Struts Version2.3.1.1
Apache ≫ Struts Version2.3.1.2
Apache ≫ Struts Version2.3.3
Apache ≫ Struts Version2.3.4
Apache ≫ Struts Version2.3.4.1
Apache ≫ Struts Version2.3.7
Apache ≫ Struts Version2.3.8
Apache ≫ Struts Version2.3.12
Apache ≫ Struts Version2.3.14
Apache ≫ Struts Version2.3.14.1
Apache ≫ Struts Version2.3.14.2
Apache ≫ Struts Version2.3.14.3
Apache ≫ Struts Version2.3.15
Apache ≫ Struts Version2.3.15.1
Apache ≫ Struts Version2.3.15.2
Apache ≫ Struts Version2.3.15.3
Apache ≫ Struts Version2.3.16
Apache ≫ Struts Version2.3.16.1
Apache ≫ Struts Version2.3.16.2
Apache ≫ Struts Version2.3.16.3
Apache ≫ Struts Version2.3.20
Apache ≫ Struts Version2.3.20.1
Apache ≫ Struts Version2.3.20.3
Apache ≫ Struts Version2.3.24
Apache ≫ Struts Version2.3.24.1
Apache ≫ Struts Version2.3.24.3
Apache ≫ Struts Version2.3.28
Apache ≫ Struts Version2.3.28.1
Apache ≫ Struts Version2.5
Apache ≫ Struts Version2.5 Updatebeta1
Apache ≫ Struts Version2.5 Updatebeta2
Apache ≫ Struts Version2.5 Updatebeta3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 6.12% 0.904
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P