Data breachcriticalExploited in the wild

Apache Struts 2 Flaws Affect Multiple Cisco Products

The Hacker Newsby @TheHackersNewsSep 12, 2017 · 10:51 UTC (Sep 12, 2017)3 min read2

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2017-9805 CVE-2017-5638 CVE-2017-9793 CVE-2017-9804 CVE-2017-12611

Tags: cve-2017-9805 cve-2017-5638 cve-2017-9793 cve-2017-9804 cve-2017-12611 breach

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-12611 +2 related CVEs CVE-2017-9793 CVE-2017-9804	In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a…	9.8 group max	87%	PoC	Sep 20, 2017
CVE-2017-5638	Unauthenticated RCE in Apache Struts Jakarta Multipart parser	9.8	100%	KEVRansomwarePoC ×10	Mar 11, 2017 KEV Nov 3, 2021
CVE-2017-9805	XML Deserialization RCE in Apache Struts 2 REST Plugin	8.1	99%	KEVPoC	Sep 15, 2017 KEV Nov 3, 2021

From the original article

3 min read at thehackernews.com

After Equifax massive data breach that was believed to be caused due to a vulnerability in Apache Struts , Cisco has initiated an investigation into its products that incorporate a version of the popular Apache Struts2 web application framework.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.