Lucene search
F5F5:K40444230HistoryJun 14, 2016 - 12:00 a.m.
K40444230 : Apache Struts 1 vulnerability CVE-2016-1181
2016-06-1400:00:00
my.f5.com
169
Security Advisory Description
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899. (CVE-2016-1181)
Impact
Under certain conditions, a remote attacker may be able to manipulate components in server memory such as Servlets and ClassLoader.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.0 | |
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 |
Related
f5
f5
SOL40444230 - Apache Struts 1 vulnerability CVE-2016-1181
2016-06-13 00:00:00
K16444 : Apache vulnerability CVE-2015-0899
2015-04-16 00:00:00
SOL16444 - Apache vulnerability CVE-2015-0899
2015-04-15 00:00:00
redhatcve
redhatcve
CVE-2016-1181
2016-06-07 12:48:28
CVE-2016-1182
2016-06-07 12:48:33
cvelist
cvelist
nvd
nvd
ubuntucve
ubuntucve
github
github
Improper Input Validation in Apache Struts
2022-05-13 01:25:20
Improper Input Validation in Apache Struts
2022-05-14 03:15:11
Improper Input Validation in Apache Struts
2022-05-13 01:25:19
osv
osv
Improper Input Validation in Apache Struts
2022-05-13 01:25:20
libstruts1.2-java - security update
2015-08-17 00:00:00
Improper Input Validation in Apache Struts
2022-05-14 03:15:11
cve
cve
prion
prion
Design/Logic Flaw
2016-07-04 22:59:00
Information disclosure
2016-07-04 22:59:00
Cross site scripting
2016-07-04 22:59:00
ibm
ibm
openvas
openvas
Apache Struts 1.x - 1.3.10 Multiple Vulnerabilities - Linux
2016-11-18 00:00:00
Apache Struts 1.x - 1.3.10 Multiple Vulnerabilities - Windows
2016-11-18 00:00:00
Debian: Security Advisory (DLA-292-1)
2023-03-08 00:00:00
nessus
nessus
debian
debian
[SECURITY] [DSA 3536-1] libstruts1.2-java security update
2016-03-31 09:30:26
[SECURITY] [DSA 3536-1] libstruts1.2-java security update
2016-03-31 09:30:26
jvn
jvn
fedora
fedora
[SECURITY] Fedora 22 Update: struts-1.3.10-14.fc22
2015-09-04 05:20:56
[SECURITY] Fedora 23 Update: struts-1.3.10-18.fc23
2016-06-30 19:54:11
[SECURITY] Fedora 24 Update: struts-1.3.10-18.fc24
2016-06-30 21:31:48
mageia
mageia
Updated struts packages fix CVE-2015-0899
2015-09-08 20:55:59
Updated struts packages fix security vulnerabilities
2016-07-08 22:50:50
symantec
symantec
Apache Struts CVE-2016-1181 Remote Code Execution Vulnerability
2016-06-07 00:00:00
checkpoint_advisories
checkpoint_advisories
ics
ics
OpenClinic GA (Update B)
2021-06-15 12:00:00
oracle
oracle
Oracle Critical Patch Update - October 2017
2017-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2019
2019-01-15 00:00:00
Oracle Critical Patch Update - January 2018
2018-01-16 00:00:00