Lucene search
CISACISA:C17258C519A149D638B0BCF35898ABEEHistoryDec 08, 2020 - 12:00 a.m.
Apache Releases Security Update for Apache Struts 2
2020-12-0800:00:00
us-cert.cisa.gov
29
apache
security update
struts 2
cve-2020-17530
remote attacker
vulnerability
cisa
advisory
privacy policy
EPSS
0.973
Percentile
99.9%
The Apache Software Foundation has released a security update to address a vulnerability in Apache Struts versions 2.0.0 to 2.5.25. A remote attacker could exploit this vulnerability to take control of an affected system.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Apache Security Bulletin S2-061 and Apache security advisory for CVE-2020-17530 and apply the necessary update or workaround.
This product is provided subject to this Notification and this Privacy & Use policy.
Please share your thoughts.
We recently updated our anonymous product survey; we’d welcome your feedback.
Related
ibm
ibm
nessus
nessus
Apache Struts 2.x < 2.5.29 Remote Code Execution (S2-062)
2022-05-18 00:00:00
Apache Struts 2.x < 2.5.26 RCE (S2-061)
2020-12-09 00:00:00
atlassian
atlassian
Update Apache Struts 2 to avoid CVE-2020-17530
2021-02-22 11:35:48
Update Apache Struts 2 to avoid CVE-2020-17530
2021-02-22 11:35:48
prion
prion
Remote code execution
2020-12-11 02:15:00
Remote code execution
2022-04-12 16:15:00
cvelist
cvelist
CVE-2020-17530
2020-12-11 01:11:04
cve
cve
CVE-2020-17530
2020-12-11 02:15:10
CVE-2021-31805
2022-04-12 16:15:08
githubexploit
githubexploit
Exploit for Expression Language Injection in Apache Struts
2020-12-18 07:03:57
Exploit for Expression Language Injection in Apache Struts
2021-01-24 07:51:31
github
github
Remote code execution in Apache Struts
2022-02-09 22:51:56
Expression Language Injection in Apache Struts
2022-04-13 00:00:30
Bypassing OGNL sandboxes for fun and charities
2023-01-27 16:00:49
qualysblog
qualysblog
Apache Struts 2 Double OGNL Evaluation Vulnerability (CVE-2020-17530)
2021-09-21 14:40:00
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
checkpoint_advisories
checkpoint_advisories
Apache Struts Remote Code Execution (CVE-2020-17530)
2020-12-21 00:00:00
openvas
openvas
Apache Struts Security Update (S2-061) - Version Check
2020-12-14 00:00:00
Apache Struts Security Update (S2-061) - Active Check
2021-04-22 00:00:00
Apache Struts Security Update (S2-062) - Active Check
2022-05-04 00:00:00
cisa_kev
cisa_kev
Apache Struts Remote Code Execution Vulnerability
2021-11-03 00:00:00
nuclei
nuclei
Apache Struts 2.0.0-2.5.25 - Remote Code Execution
2021-01-27 18:47:58
Apache Struts2 S2-062 - Remote Code Execution
2022-04-18 11:08:19
redhatcve
redhatcve
CVE-2020-17530
2020-12-08 19:34:44
CVE-2021-31805
2022-04-13 06:28:32
osv
osv
CVE-2020-17530
2020-12-11 02:15:10
Remote code execution in Apache Struts
2022-02-09 22:51:56
Expression Language Injection in Apache Struts
2022-04-13 00:00:30
veracode
veracode
Remote Code Execution
2020-12-09 05:42:42
Remote Code Execution (RCE)
2022-04-13 04:46:59
nvd
nvd
CVE-2020-17530
2020-12-11 02:15:10
CVE-2021-31805
2022-04-12 16:15:08
saint
saint
Apache Struts forced OGNL evaluation incomplete fix
2022-04-26 00:00:00
Apache Struts forced OGNL evaluation incomplete fix
2022-04-26 00:00:00
jvn
jvn
JVN#43969166: Apache Struts 2 vulnerable to remote code execution (S2-061)
2020-12-11 00:00:00
ubuntucve
ubuntucve
CVE-2020-17530
2020-12-11 00:00:00
CVE-2021-31805
2022-04-12 00:00:00
attackerkb
attackerkb
CVE-2020-17530
2020-12-11 00:00:00
CVE-2021-31805
2022-04-12 00:00:00
zdt
zdt
Apache Struts 2 Forced Multi OGNL Evaluation Exploit
2020-12-24 00:00:00
metasploit
metasploit
Apache Struts 2 Forced Multi OGNL Evaluation
2020-12-16 00:17:35
packetstorm
packetstorm
Apache Struts 2 Forced Multi OGNL Evaluation
2020-12-24 00:00:00
f5
f5
Apache Struts vulnerabilities CVE-2020-17530 and CVE-2021-31805
2020-12-22 01:45:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-01-08 19:54:36
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00