CVE-2017-9787

CVSS 3.0: 7.5 high
EPSS: 11%p95
Published: Jul 13, 2017 · Jul 13, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-9787 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.

Vendors: apache

Products: struts

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (10.6%)

In the news

1 story

Oracle releases security patches for Apache Struts CVE-2017

Security AffairsSep 26, 06:34 UTC · Sep 26, 2017VulnerabilityExploitedCVE-2017-9805 CVE-2017-7672 CVE-2017-9787+52 · 1 read