Filter
AND
AND
Versions
2.0.0
18
2.0.9
14
2.0.11
13
2.0.6
13
2.0.8
13
2.0.11.1
12
2.0.11.2
12
2.0.14
11
2.0.2
11
2.0.3
11
2.0.4
11
2.0.5
11
2.0.7
11
2.1.0
11
2.0.1
10
2.0.10
10
2.0.12
10
2.0.13
10
2.1.1
10
2.1.2
10
2.1.3
10
2.1.4
10
2.1.5
10
2.1.6
10
2.1.8
10
2.1.8.1
10
2.2.1
10
2.2.1.1
9
2.2.3
9
2.2.3.1
8
2.3.1
8
2.3.1.1
8
2.3.1.2
8
2.3.4
8
2.3.3
7
2.3.12
6
2.3.14
6
2.3.14.1
6
2.3.14.2
6
2.3.14.3
6
2.3.15
6
2.3.4.1
6
2.3.7
6
2.3.8
6
2.3.15.1
5
2.3.15.3
5
2.3.15.2
4
2.3.16
4
2.3.16.1
4
2.3.16.2
4
2.3.16.3
4
2.3.24.1
4
2.5
4
2.3.20
3
2.3.24
3
1.2.7
2
1.2.8
2
2.1
2
2.1.2_beta
2
2.3.20.1
2
2.3.20.3
2
2.5.1
2
2.5.2
2
2.5.5
2
1.0.2
1
1.1
1
1.2.4
1
1.3.10
1
2.3.17
1
2.3.24.3
1
2.3.28
1
2.3.28.1
1
2.5-beta1
1
2.5-beta2
1
2.5-beta3
1
2.5.10
1
2.5.10.1
1
2.5.14
1
2.5.3
1
2.5.4
1
2.5.8
1
Apache StrutsThe ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public…
6.4
First published (updated )
Apache StrutsThe CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whit…
6.8
First published (updated )
Oracle Retail Xstore Point of ServiceInput Validation
6.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache StrutsOGNL provides, among other features, extensive expression evaluation capabilities. This vulnerabilit…
First published (updated )
Apache StrutsApache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly restrict …
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache StrutsApache Struts 2.0.0 through 2.3.15.1 allows remote attackers to bypass access controls via a crafted…
5.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache StrutsCookieInterceptor in Apache Struts 2.x before 2.3.20, when a wildcard cookiesName value is used, doe…
5.8
First published (updated )
redhat/StrutsThe ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" t…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.