CVE-2017-15707

Published: Dec 1, 2017Modified: May 13, 2026

6.2

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.5 / Impact: 3.6

Source: NVD

Description

In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.

Affected (20)

Products: Apache: Struts · Netapp: Oncommand Balance · Oracle: Agile Plm Framework, Enterprise Manager For Virtualization, Financial Services Hedge Management And Ifrs Valuations, Financial Services Market Risk Measurement And Management, Global Lifecycle Management Opatchauto, Jd Edwards Enterpriseone Tools, Retail Order Broker, Retail Xstore Point Of Service, Webcenter Portal, Weblogic Server

1 product

1 product

10 products

Enterprise Manager For Virtualization

Financial Services Hedge Management And Ifrs Valuations

Financial Services Market Risk Measurement And Management

Global Lifecycle Management Opatchauto

Jd Edwards Enterpriseone Tools

Retail Order Broker

Retail Xstore Point Of Service

Webcenter Portal

Weblogic Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Struts	From 2.5 to 2.5.14

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Netapp Oncommand Balance	All versions

Configuration C

18 vulnerable

Vulnerable Software	Affected Versions
Oracle Agile Plm Framework	Version 9.3.6
Oracle Enterprise Manager For Virtualization	Version 13.2.2
Oracle Enterprise Manager For Virtualization	Version 13.2.3
Oracle Financial Services Hedge Management And Ifrs Valuations	Version 8.0.4
Oracle Financial Services Hedge Management And Ifrs Valuations	Version 8.0.5
Oracle Financial Services Market Risk Measurement And Management	Version 8.0.5
Oracle Global Lifecycle Management Opatchauto	All versions
Oracle Jd Edwards Enterpriseone Tools	Version 9.2
Oracle Retail Order Broker	Version 5.2
Oracle Retail Xstore Point Of Service	Version 15.0.1
Oracle Retail Xstore Point Of Service	Version 16.0.2
Oracle Retail Xstore Point Of Service	Version 6.5.11
Oracle Retail Xstore Point Of Service	Version 7.0.6
Oracle Retail Xstore Point Of Service	Version 7.1.6
Oracle Webcenter Portal	Version 12.2.1.2.0
Oracle Webcenter Portal	Version 12.2.1.3.0
Oracle Weblogic Server	Version 12.2.1.2
Oracle Weblogic Server	Version 12.2.1.3