CVE-2017-9787

Published: Jul 13, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.

Affected (53)

Products: Apache: Struts

Apache

1 product

Struts

Configuration A

53 vulnerable

Vulnerable Software	Affected Versions
Apache Struts	Version 2.3.10
Apache Struts	Version 2.3.11
Apache Struts	Version 2.3.12
Apache Struts	Version 2.3.13
Apache Struts	Version 2.3.14.1
Apache Struts	Version 2.3.14.2
Apache Struts	Version 2.3.14.3
Apache Struts	Version 2.3.14
Apache Struts	Version 2.3.15.1
Apache Struts	Version 2.3.15.2
Apache Struts	Version 2.3.15.3
Apache Struts	Version 2.3.15
Apache Struts	Version 2.3.16.1
Apache Struts	Version 2.3.16.2
Apache Struts	Version 2.3.16.3
Apache Struts	Version 2.3.16
Apache Struts	Version 2.3.17
Apache Struts	Version 2.3.19
Apache Struts	Version 2.3.20.1
Apache Struts	Version 2.3.20.2
Apache Struts	Version 2.3.20.3
Apache Struts	Version 2.3.20
Apache Struts	Version 2.3.21
Apache Struts	Version 2.3.22
Apache Struts	Version 2.3.23
Apache Struts	Version 2.3.24.1
Apache Struts	Version 2.3.24.2
Apache Struts	Version 2.3.24.3
Apache Struts	Version 2.3.24
Apache Struts	Version 2.3.25
Apache Struts	Version 2.3.26
Apache Struts	Version 2.3.27
Apache Struts	Version 2.3.28.1
Apache Struts	Version 2.3.28
Apache Struts	Version 2.3.29
Apache Struts	Version 2.3.30
Apache Struts	Version 2.3.31
Apache Struts	Version 2.3.32
Apache Struts	Version 2.3.7
Apache Struts	Version 2.3.8
Apache Struts	Version 2.3.9
Apache Struts	Version 2.5.10.1
Apache Struts	Version 2.5.10
Apache Struts	Version 2.5.1
Apache Struts	Version 2.5.2
Apache Struts	Version 2.5.3
Apache Struts	Version 2.5.4
Apache Struts	Version 2.5.5
Apache Struts	Version 2.5.6
Apache Struts	Version 2.5.7
Apache Struts	Version 2.5.8
Apache Struts	Version 2.5.9
Apache Struts	Version 2.5