Evil-DB LogoEvil-DB
← All CVEs

CVE-2017-9787

high · 7.5

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.

7.5
CVSS
10.6%
EPSS (exploit prob.)
96th
EPSS percentile
2017-07-13
Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

VendorProductAffected versions
apachestruts2.3.7
apachestruts2.3.8
apachestruts2.3.9
apachestruts2.3.10
apachestruts2.3.11
apachestruts2.3.12
apachestruts2.3.13
apachestruts2.3.14
apachestruts2.3.14.1
apachestruts2.3.14.2
apachestruts2.3.14.3
apachestruts2.3.15
apachestruts2.3.15.1
apachestruts2.3.15.2
apachestruts2.3.15.3
apachestruts2.3.16
apachestruts2.3.16.1
apachestruts2.3.16.2
apachestruts2.3.16.3
apachestruts2.3.17
apachestruts2.3.19
apachestruts2.3.20
apachestruts2.3.20.1
apachestruts2.3.20.2
apachestruts2.3.20.3
apachestruts2.3.21
apachestruts2.3.22
apachestruts2.3.23
apachestruts2.3.24
apachestruts2.3.24.1
apachestruts2.3.24.2
apachestruts2.3.24.3
apachestruts2.3.25
apachestruts2.3.26
apachestruts2.3.27
apachestruts2.3.28
apachestruts2.3.28.1
apachestruts2.3.29
apachestruts2.3.30
apachestruts2.3.31

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-9787