cbcvebase.
CVE-2012-4387
published 2012-09-05

CVE-2012-4387: Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an…

PriorityP423medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
8.07%
94.2th percentile
Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
apachestruts——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.