PULSEUnderground Intel

AO VIVO22sinais / 24h

FEED

ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Education

← Todos os CVEs

CVE Watch—

CVE-2017-5638

Apache Struts Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

100.0%

p100

KEV

SIM

3 de nov. de 2021

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 dias100.0%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Apache / Struts

Vulnerabilidade

Apache Struts Remote Code Execution Vulnerability

Adicionado ao KEV

3 de nov. de 2021

Corrigir até

3 de mai. de 2022

Uso conhecido em ransomware

Sim

Descrição resumida

Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.

Ação necessária

Apply updates per vendor instructions.

Notas

https://nvd.nist.gov/vuln/detail/CVE-2017-5638

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2016-30818.1 ALT

KEV—80Apache Struts Command Injection Vulnerability27d CVE-2013-2251—

KEV—80Apache Struts Improper Input Validation Vulnerability—CVE-2018-11776—

KEV—80Apache Struts Remote Code Execution Vulnerability—CVE-2017-9805—

KEV—80Apache Struts Deserialization of Untrusted Data Vulnerability—CVE-2020-17530—

KEV—80Apache Struts Remote Code Execution Vulnerability—