What versions of Apache Struts are affected by CVE-2012-1006?

CVE-2012-1006 affects Apache Struts versions 2.0.14 and 2.2.3.

How can I mitigate the risks of CVE-2012-1006?

To mitigate CVE-2012-1006, users should upgrade to a patched version of Apache Struts that addresses these XSS vulnerabilities.

Is CVE-2012-1006 a critical vulnerability?

CVE-2012-1006 is considered a significant security risk due to its potential for remote attackers to inject malicious scripts.

What types of attacks are possible through CVE-2012-1006?

CVE-2012-1006 allows remote attackers to perform cross-site scripting attacks, potentially compromising user sessions and data.

Vulnerability/
CVE-2012-1006

medium

4.3

CWE

7/2/2012

29/8/2017

17/5/2022

CVE-2012-1006: XSS

First published: Tue Feb 07 2012(Updated: )

Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to `struts2-showcase/person/editPerson.action`, or the (3) clientName parameter to `struts2-rest-showcase/orders`.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
Apache Struts	=2.0.14
Apache Struts	=2.2.3

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What are the main vulnerabilities associated with CVE-2012-1006?
CVE-2012-1006 is associated with multiple cross-site scripting (XSS) vulnerabilities in Apache Struts allowing injection via specific parameters.
What versions of Apache Struts are affected by CVE-2012-1006?
CVE-2012-1006 affects Apache Struts versions 2.0.14 and 2.2.3.
How can I mitigate the risks of CVE-2012-1006?
To mitigate CVE-2012-1006, users should upgrade to a patched version of Apache Struts that addresses these XSS vulnerabilities.
Is CVE-2012-1006 a critical vulnerability?
CVE-2012-1006 is considered a significant security risk due to its potential for remote attackers to inject malicious scripts.
What types of attacks are possible through CVE-2012-1006?
CVE-2012-1006 allows remote attackers to perform cross-site scripting attacks, potentially compromising user sessions and data.

collector/nvd-cve
collector/nvd-index
agent/author
agent/description
agent/event
agent/first-publish-date
agent/last-modified-date
agent/references
agent/severity
agent/softwarecombine
agent/tags
agent/type
agent/weakness
vendor/apache
canonical/apache struts
version/apache struts/2.0.14
version/apache struts/2.2.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What are the main vulnerabilities associated with CVE-2012-1006?
CVE-2012-1006 is associated with multiple cross-site scripting (XSS) vulnerabilities in Apache Struts allowing injection via specific parameters.
What versions of Apache Struts are affected by CVE-2012-1006?
CVE-2012-1006 affects Apache Struts versions 2.0.14 and 2.2.3.
How can I mitigate the risks of CVE-2012-1006?
To mitigate CVE-2012-1006, users should upgrade to a patched version of Apache Struts that addresses these XSS vulnerabilities.
Is CVE-2012-1006 a critical vulnerability?
CVE-2012-1006 is considered a significant security risk due to its potential for remote attackers to inject malicious scripts.
What types of attacks are possible through CVE-2012-1006?
CVE-2012-1006 allows remote attackers to perform cross-site scripting attacks, potentially compromising user sessions and data.

CVE-2012-1006: XSS

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What are the main vulnerabilities associated with CVE-2012-1006?

What versions of Apache Struts are affected by CVE-2012-1006?

How can I mitigate the risks of CVE-2012-1006?

Is CVE-2012-1006 a critical vulnerability?

What types of attacks are possible through CVE-2012-1006?

Company

Resources

Contact

Frequently Asked Questions

What are the main vulnerabilities associated with CVE-2012-1006?

What versions of Apache Struts are affected by CVE-2012-1006?

How can I mitigate the risks of CVE-2012-1006?

Is CVE-2012-1006 a critical vulnerability?

What types of attacks are possible through CVE-2012-1006?