CVE-2016-4436

Description

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

7.34

Vulnerability	OS Platform
Vulnerabilities CVE-2016-4436,CVE-2016-4465,CVE-2016-4438 are fixed in Apache-struts2-core 2.3.29	Windows
Vulnerabilities CVE-2016-4436 are fixed in Apache-struts2-core 2.5.1	Windows
Vulnerabilities CVE-2016-4436,CVE-2016-4461 are fixed in Apache-struts2-core 2.3.29	Windows
Vulnerabilities CVE-2016-4436,CVE-2016-4465,CVE-2016-4438 are fixed in Apache-structs2-core for Linux 2.3.29	Linux
Vulnerabilities CVE-2016-4436 are fixed in Apache-structs2-core for Linux 2.5.1	Linux
Vulnerabilities CVE-2016-4436,CVE-2016-4461 are fixed in Apache-structs2-core for Linux 2.3.29	Linux

No records found