Lucene search

Japan Vulnerability NotesJVN:25435092

HistoryDec 22, 2011 - 12:00 a.m.

JVN#25435092: Apache Struts vulnerable to cross-site scripting

2011-12-2200:00:00

Japan Vulnerability Notes

jvn.jp

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.3%

JSON

Apache Struts provided by the Apache Software Foundation is a software framework for creating Java web applications. Apache Struts may create web applications that contain a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

Apache Struts versions prior to 2.2.3.1
Apache Struts versions 2.0.x

Web applications that use Apache Struts may be affected.

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.3%

JSON

Related for JVN:25435092