7.5

CVE-2017-9787

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.

Data is provided by the National Vulnerability Database (NVD)
Apache ≫ Struts Version2.3.7
Apache ≫ Struts Version2.3.8
Apache ≫ Struts Version2.3.9
Apache ≫ Struts Version2.3.10
Apache ≫ Struts Version2.3.11
Apache ≫ Struts Version2.3.12
Apache ≫ Struts Version2.3.13
Apache ≫ Struts Version2.3.14
Apache ≫ Struts Version2.3.14.1
Apache ≫ Struts Version2.3.14.2
Apache ≫ Struts Version2.3.14.3
Apache ≫ Struts Version2.3.15
Apache ≫ Struts Version2.3.15.1
Apache ≫ Struts Version2.3.15.2
Apache ≫ Struts Version2.3.15.3
Apache ≫ Struts Version2.3.16
Apache ≫ Struts Version2.3.16.1
Apache ≫ Struts Version2.3.16.2
Apache ≫ Struts Version2.3.16.3
Apache ≫ Struts Version2.3.17
Apache ≫ Struts Version2.3.19
Apache ≫ Struts Version2.3.20
Apache ≫ Struts Version2.3.20.1
Apache ≫ Struts Version2.3.20.2
Apache ≫ Struts Version2.3.20.3
Apache ≫ Struts Version2.3.21
Apache ≫ Struts Version2.3.22
Apache ≫ Struts Version2.3.23
Apache ≫ Struts Version2.3.24
Apache ≫ Struts Version2.3.24.1
Apache ≫ Struts Version2.3.24.2
Apache ≫ Struts Version2.3.24.3
Apache ≫ Struts Version2.3.25
Apache ≫ Struts Version2.3.26
Apache ≫ Struts Version2.3.27
Apache ≫ Struts Version2.3.28
Apache ≫ Struts Version2.3.28.1
Apache ≫ Struts Version2.3.29
Apache ≫ Struts Version2.3.30
Apache ≫ Struts Version2.3.31
Apache ≫ Struts Version2.3.32
Apache ≫ Struts Version2.5
Apache ≫ Struts Version2.5.1
Apache ≫ Struts Version2.5.2
Apache ≫ Struts Version2.5.3
Apache ≫ Struts Version2.5.4
Apache ≫ Struts Version2.5.5
Apache ≫ Struts Version2.5.6
Apache ≫ Struts Version2.5.7
Apache ≫ Struts Version2.5.8
Apache ≫ Struts Version2.5.9
Apache ≫ Struts Version2.5.10
Apache ≫ Struts Version2.5.10.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 13.88% 0.94
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
http://www.securityfocus.com/bid/99562
Third Party Advisory
VDB Entry