The Akamai Security Intelligence Group has seen numerous exploitation attempts on Apache Struts 2 since December 7, 2023, when a critical CVE was released.

cnvd 1

nessus 4

f5 1

adobe 1

malwarebytes 2

cvelist 1

openvas 1

srcincite 2

osv 2

githubexploit 9

ibm 9

saint 2

hivepro 1

qualysblog 4

cve 1

prion 1

trendmicroblog 1

redhatcve 1

nvd 1

ubuntucve 1

cisco 1

veracode 1

github 1

thn 1

impervablog 1

avleonov 1

oracle 1

cnvd

Apache Struts Directory Traversal Vulnerability

2023-12-12 00:00:00

nessus

Cisco Identity Services Engine RCE (cisco-sa-struts-C2kCMkmT)

2023-12-21 00:00:00

Adobe Experience Manager 6.0.0.0 < 6.5.19.1 Arbitrary code execution (APSB23-77)

2024-01-07 00:00:00

Apache Struts 2.5.0 < 2.5.33 / 6.0.0 < 6.3.0.2 Remote Code Execution (S2-066)

2023-12-07 00:00:00

K000137931 : Apache Struts vulnerability CVE-2023-50164

2023-12-15 00:00:00

adobe

APSB23-77 : Security update available for Adobe Experience Manager Forms

2023-12-15 00:00:00

malwarebytes

Recently-patched Apache Struts vulnerability used in worldwide attacks

2023-12-14 21:35:04

Microsoft patches 34 vulnerabilities, including one zero-day

2023-12-13 16:39:23

cvelist

CVE-2023-50164 Apache Struts: File upload component had a directory traversal vulnerability

2023-12-07 08:49:19

openvas

Apache Struts Security Update (S2-066)

2023-12-08 00:00:00

srcincite

SRC-2023-0004 : Apache Struts Security Feature Bypass Remote Code Execution Vulnerability

2023-11-08 00:00:00

SRC-2024-0001 : Trackplus Allegra Service Desk Module UploadHelper upload Directory Traversal Remote Code Execution Vulnerability

2023-11-08 00:00:00

osv

CVE-2023-50164

2023-12-07 09:15:07

Apache Struts vulnerable to path traversal

2023-12-07 09:30:45

githubexploit

Exploit for Files or Directories Accessible to External Parties in Apache Struts

2023-12-15 21:19:51

Exploit for Files or Directories Accessible to External Parties in Apache Struts

2023-12-13 09:31:36

Exploit for Files or Directories Accessible to External Parties in Apache Struts

2023-12-17 14:18:54

ibm

Security Bulletin: Vulnerabilities in Apache Struts library affect Tivoli Netcool/OMNIbus WebGUI (CVE-2023-50164)

2024-01-17 02:54:37

Security Bulletin: Struts Vulnerability - Order Management does contain the Struts code and it is vulnerable with lower risk [CVE-2023-50164]

2024-02-07 22:07:01

Security Bulletin: CVE-2023-50164 may affect Apache Struts2 used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

2024-01-10 05:13:03

saint

Apache Struts file upload directory traversal

2023-12-20 00:00:00

Apache Struts file upload directory traversal

2023-12-20 00:00:00

hivepro

Critical Remote Code Execution Flaw Uncovered in Apache Struts 2

2023-12-15 06:56:04

qualysblog

Detect and Manage the Risk of Apache Struts (CVE-2023-50164) Comprehensively

2024-01-12 22:44:26

Yet Another Apache Struts 2 Vulnerability – CVE-2023-50164

2023-12-26 14:06:14

Announcing TotalCloud™ 2.0 with TruRisk™ Insights: The Future of Cloud and SaaS Security

2024-02-07 13:55:00

cve

CVE-2023-50164

2023-12-07 09:15:07

prion

Design/Logic Flaw

2023-12-07 09:15:00

trendmicroblog

Decoding CVE-2023-50164: Unveiling the Apache Struts File Upload Exploit

2023-12-15 00:00:00

redhatcve

CVE-2023-50164

2023-12-11 06:27:16

nvd

CVE-2023-50164

2023-12-07 09:15:07

ubuntucve

CVE-2023-50164

2023-12-07 00:00:00

cisco

Apache Struts Vulnerability Affecting Cisco Products: December 2023

2023-12-12 16:00:00

veracode

Remote Code Execution (RCE)

2023-12-14 16:09:57

github

Apache Struts vulnerable to path traversal

2023-12-07 09:30:45

thn

New Critical RCE Vulnerability Discovered in Apache Struts 2 - Patch Now

2023-12-12 05:23:00

impervablog

CVE-2023-50164: A Critical Vulnerability in Apache Struts

2023-12-19 12:34:31

avleonov

November 2023 – January 2024: New Vulristics Features, 3 Months of Microsoft Patch Tuesdays and Linux Patch Wednesdays, Year 2023 in Review

2024-02-01 17:07:20

oracle

Oracle Critical Patch Update Advisory - January 2024

2024-01-16 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.3

Confidence

Low

EPSS

0.09

Percentile

94.6%

JSON

Related for AKAMAIBLOG:E6AFEACB45DC434B991E061235568FCF