Global Lifecycle Management Opatchauto
1 CVEs
product
Monthly
In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity.
Apache
Information Disclosure
Oracle
Jd Edwards Enterpriseone Tools
Struts
+11
NVD
CVSS 3.0
6.2
EPSS
1.5%
CVE-2017-15707
Maven
EPSS 2%
CVSS 6.2
MEDIUM
PATCH
This Month
In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload. Rated medium severity (CVSS 6.2), this vulnerability is no authentication required, low attack complexity.
Apache
Information Disclosure
Oracle
+13
NVD