Lucene search
F5F5:K04403302HistoryJun 16, 2016 - 12:00 a.m.
K04403302 : Apache Struts 1 vulnerability CVE-2016-1182
2016-06-1600:00:00
my.f5.com
18
Security Advisory Description
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 does not properly restrict the Validator configuration, which allows remote attackers to conduct cross-site scripting (XSS) attacks or cause a denial of service via crafted input, a related issue to CVE-2015-0899. (CVE-2016-1182)
Impact
Cross-site scripting (XSS) or denial-of-service (DoS) attacks may be possible.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
f5
f5
SOL04403302 - Apache Struts 1 vulnerability CVE-2016-1182
2016-06-16 00:00:00
K16444 : Apache vulnerability CVE-2015-0899
2015-04-16 00:00:00
SOL16444 - Apache vulnerability CVE-2015-0899
2015-04-15 00:00:00
cve
cve
checkpoint_advisories
checkpoint_advisories
cvelist
cvelist
redhatcve
redhatcve
CVE-2016-1182
2016-06-07 12:48:33
CVE-2016-1181
2016-06-07 12:48:28
prion
prion
Cross site scripting
2016-07-04 22:59:00
Information disclosure
2016-07-04 22:59:00
Design/Logic Flaw
2016-07-04 22:59:00
osv
osv
Improper Input Validation in Apache Struts
2022-05-13 01:25:19
libstruts1.2-java - security update
2015-08-17 00:00:00
Improper Input Validation in Apache Struts
2022-05-14 03:15:11
ubuntucve
ubuntucve
nvd
nvd
github
github
Improper Input Validation in Apache Struts
2022-05-13 01:25:19
Improper Input Validation in Apache Struts
2022-05-14 03:15:11
Improper Input Validation in Apache Struts
2022-05-13 01:25:20
ibm
ibm
openvas
openvas
Apache Struts 1.x - 1.3.10 Multiple Vulnerabilities - Linux
2016-11-18 00:00:00
Apache Struts 1.x - 1.3.10 Multiple Vulnerabilities - Windows
2016-11-18 00:00:00
Debian: Security Advisory (DLA-292-1)
2023-03-08 00:00:00
nessus
nessus
debian
debian
[SECURITY] [DSA 3536-1] libstruts1.2-java security update
2016-03-31 09:30:26
[SECURITY] [DSA 3536-1] libstruts1.2-java security update
2016-03-31 09:30:26
jvn
jvn
JVN#91383083: Seasar S2Struts vulnerable to input validation bypass
2015-04-10 00:00:00
JVN#86448949: The Validator in TERASOLUNA Server Framework for Java(WEB) vulnerable to input validation bypass
2015-03-24 00:00:00
JVN#65044642: Apache Struts 1 vulnerable to input validation bypass
2016-06-07 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: struts-1.3.10-14.fc22
2015-09-04 05:20:56
[SECURITY] Fedora 23 Update: struts-1.3.10-18.fc23
2016-06-30 19:54:11
[SECURITY] Fedora 24 Update: struts-1.3.10-18.fc24
2016-06-30 21:31:48
mageia
mageia
Updated struts packages fix CVE-2015-0899
2015-09-08 20:55:59
Updated struts packages fix security vulnerabilities
2016-07-08 22:50:50
ics
ics
OpenClinic GA (Update B)
2021-06-15 12:00:00
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00