Lucene search
F5F5:K45474286HistorySep 08, 2017 - 12:00 a.m.
K45474286 : Apache Struts Freemarker Remote Code Execution vulnerability CVE-2017-12611
2017-09-0800:00:00
my.f5.com
157
Security Advisory Description
In Apache Struts 2.0.1 through 2.3.33 and 2.5 through 2.5.10, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack. (CVE-2017-12611)
Impact
There is no impact; F5 products are not affected by this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| big-ip afm | eq | 11.4.1 | |
| big-ip afm | eq | 11.5.0 | |
| big-ip afm | eq | 11.5.1 | |
| big-ip afm | eq | 11.5.2 | |
| big-ip afm | eq | 11.5.3 | |
| big-ip afm | eq | 11.5.4 | |
| big-ip afm | eq | 11.6.0 | |
| big-ip afm | eq | 11.6.1 | |
| big-ip afm | eq | 12.0.0 | |
| big-ip afm | eq | 12.1.0 |
Related
checkpoint_advisories
checkpoint_advisories
Apache Struts2 Freemarker Remote Code Execution (CVE-2017-12611) - Ver2
2018-04-15 00:00:00
Apache Struts2 Freemarker Remote Code Execution (CVE-2017-12611)
2017-09-08 00:00:00
ibm
ibm
prion
prion
Code injection
2017-09-20 17:29:00
redhatcve
redhatcve
CVE-2017-12611
2017-09-07 14:48:25
openvas
openvas
Apache Struts Security Update (S2-053) - Active Check
2017-09-11 00:00:00
Apache Struts Security Update (S2-053) - Version Check
2021-04-06 00:00:00
seebug
seebug
Apache Struts2 S2-053 (CVE-2017-12611)
2017-09-07 00:00:00
cve
cve
CVE-2017-12611
2017-09-20 17:29:00
atlassian
atlassian
ubuntucve
ubuntucve
CVE-2017-12611
2017-09-20 00:00:00
zdt
zdt
veracode
veracode
Remote Code Execution (RCE)
2017-09-08 06:31:48
dsquare
dsquare
Apache Struts 2 Freemarker Tag Handling RCE
2018-10-20 00:00:00
cisco
cisco
cvelist
cvelist
CVE-2017-12611
2017-09-07 00:00:00
nvd
nvd
CVE-2017-12611
2017-09-20 17:29:00
github
github
nuclei
nuclei
Apache Struts2 S2-053 - Remote Code Execution
2021-02-21 14:01:50
osv
osv
Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal
2018-10-16 19:35:40
CVE-2017-12611
2017-09-20 17:29:00
threatpost
threatpost
Apache Security Advisories Red Flag Wrong Versions in Patching Gaffe
2019-08-15 18:41:37
Oracle Patches Apache Struts, Reminds Users to Update Equifax Bug
2017-09-26 14:28:26
impervablog
impervablog
Apache Struts, RCE and Managing App Risk
2017-09-18 20:33:25
nessus
nessus
thn
thn
Apache Struts 2 Flaws Affect Multiple Cisco Products
2017-09-11 23:50:00
trendmicroblog
trendmicroblog