← Back

CVE-2016-1181

nvd nist
Published: Jul 4, 2016Modified: May 6, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD

Description

ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899.

Affected (33)

Oracle
2 products
Banking Platform
Portal
Apache
1 product
Struts
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Banking Platform
Version 2.3.0
Banking Platform
Version 2.4.0
Banking Platform
Version 2.4.1
Banking Platform
Version 2.5.0
Portal
Version 11.1.1.6
Configuration B
28 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Struts
Version 1.0.1
Struts
Version 1.0.2
Struts
Version 1.0
Struts
Version 1.0 beta1
Struts
Version 1.0 beta2
Struts
Version 1.0 beta3
Struts
Version 1.1
Struts
Version 1.1 b1
Struts
Version 1.1 b2
Struts
Version 1.1 b3
Struts
Version 1.1 rc1
Struts
Version 1.1 rc2
Struts
Version 1.2.0
Struts
Version 1.2.1
Struts
Version 1.2.2
Struts
Version 1.2.3
Struts
Version 1.2.4
Struts
Version 1.2.5
Struts
Version 1.2.6
Struts
Version 1.2.7
Struts
Version 1.2.8
Struts
Version 1.2.9
Struts
Version 1.3.10
Struts
Version 1.3.5
Struts
Version 1.3.6
Struts
Version 1.3.7
Struts
Version 1.3.8
Struts
Version 1.3.9

References (42)

Source: vultures@jpcert.or.jp
Vendor Advisory
Source: vultures@jpcert.or.jp
Third Party AdvisoryVDB EntryVendor Advisory
Source: vultures@jpcert.or.jp
Patch
Source: vultures@jpcert.or.jp
PatchThird Party Advisory
Source: vultures@jpcert.or.jp
Patch
Source: vultures@jpcert.or.jp
Patch
Source: vultures@jpcert.or.jp
PatchThird Party Advisory
Source: vultures@jpcert.or.jp
Patch
Source: vultures@jpcert.or.jp
Patch
Source: vultures@jpcert.or.jp
Third Party AdvisoryVDB Entry
Source: vultures@jpcert.or.jp
Third Party AdvisoryVDB Entry
Source: vultures@jpcert.or.jp
Third Party AdvisoryVDB Entry
Source: vultures@jpcert.or.jp
Issue Tracking
Source: vultures@jpcert.or.jp
Issue TrackingPatch
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Third Party Advisory
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Source: vultures@jpcert.or.jp
Patch
Source: vultures@jpcert.or.jp
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.