Skip to content

CVE-2016-4436 Apache Struts improper action name cleanup

CriticalCVSS 9.8 EPSS 6.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.

Affected products

ProductAffected versionsFixed in
org.apache.struts/struts2-core(Maven) >= 2.0.0, < 2.3.29 2.3.29
org.apache.struts/struts2-core(Maven) = 2.0.11 No fix listed
org.apache.struts/struts2-core(Maven) = 2.0.11.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.0.11.2 No fix listed
org.apache.struts/struts2-core(Maven) = 2.0.12 No fix listed
org.apache.struts/struts2-core(Maven) = 2.0.14 No fix listed
org.apache.struts/struts2-core(Maven) = 2.0.5 No fix listed
org.apache.struts/struts2-core(Maven) = 2.0.6 No fix listed
org.apache.struts/struts2-core(Maven) = 2.0.8 No fix listed
org.apache.struts/struts2-core(Maven) = 2.0.9 No fix listed
org.apache.struts/struts2-core(Maven) = 2.1.2 No fix listed
org.apache.struts/struts2-core(Maven) = 2.1.6 No fix listed
org.apache.struts/struts2-core(Maven) = 2.1.8 No fix listed
org.apache.struts/struts2-core(Maven) = 2.1.8.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.2.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.2.1.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.2.3 No fix listed
org.apache.struts/struts2-core(Maven) = 2.2.3.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.1.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.1.2 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.12 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.14 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.14.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.14.2 No fix listed
Show 82 more
ProductAffected versionsFixed in
org.apache.struts/struts2-core(Maven) = 2.3.14.3 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.15 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.15.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.15.2 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.15.3 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.16 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.16.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.16.2 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.16.3 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.20 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.20.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.20.3 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.24 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.24.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.24.3 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.28 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.28.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.3 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.4 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.4.1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.7 No fix listed
org.apache.struts/struts2-core(Maven) = 2.3.8 No fix listed
org.apache.struts/struts2-core(Maven) >= 2.5-BETA1, < 2.5.1 2.5.1
org.apache.struts/struts2-core(Maven) = 2.5 No fix listed
org.apache.struts/struts2-core(Maven) = 2.5-BETA1 No fix listed
org.apache.struts/struts2-core(Maven) = 2.5-BETA2 No fix listed
org.apache.struts/struts2-core(Maven) = 2.5-BETA3 No fix listed
apache struts = 2.0.0 No fix listed
apache struts = 2.0.1 No fix listed
apache struts = 2.0.2 No fix listed
apache struts = 2.0.3 No fix listed
apache struts = 2.0.4 No fix listed
apache struts = 2.0.5 No fix listed
apache struts = 2.0.6 No fix listed
apache struts = 2.0.7 No fix listed
apache struts = 2.0.8 No fix listed
apache struts = 2.0.9 No fix listed
apache struts = 2.0.11 No fix listed
apache struts = 2.0.11.1 No fix listed
apache struts = 2.0.11.2 No fix listed
apache struts = 2.0.12 No fix listed
apache struts = 2.0.14 No fix listed
apache struts = 2.1.6 No fix listed
apache struts = 2.1.8 No fix listed
apache struts = 2.1.8.1 No fix listed
apache struts = 2.2.1 No fix listed
apache struts = 2.2.1.1 No fix listed
apache struts = 2.2.3 No fix listed
apache struts = 2.2.3.1 No fix listed
apache struts = 2.3.1 No fix listed
apache struts = 2.3.1.1 No fix listed
apache struts = 2.3.1.2 No fix listed
apache struts = 2.3.3 No fix listed
apache struts = 2.3.4 No fix listed
apache struts = 2.3.4.1 No fix listed
apache struts = 2.3.7 No fix listed
apache struts = 2.3.8 No fix listed
apache struts = 2.3.12 No fix listed
apache struts = 2.3.14 No fix listed
apache struts = 2.3.14.1 No fix listed
apache struts = 2.3.14.2 No fix listed
apache struts = 2.3.14.3 No fix listed
apache struts = 2.3.15 No fix listed
apache struts = 2.3.15.1 No fix listed
apache struts = 2.3.15.2 No fix listed
apache struts = 2.3.15.3 No fix listed
apache struts = 2.3.16 No fix listed
apache struts = 2.3.16.1 No fix listed
apache struts = 2.3.16.2 No fix listed
apache struts = 2.3.16.3 No fix listed
apache struts = 2.3.20 No fix listed
apache struts = 2.3.20.1 No fix listed
apache struts = 2.3.20.3 No fix listed
apache struts = 2.3.24 No fix listed
apache struts = 2.3.24.1 No fix listed
apache struts = 2.3.24.3 No fix listed
apache struts = 2.3.28 No fix listed
apache struts = 2.3.28.1 No fix listed
apache struts = 2.5 No fix listed
apache struts = 2.5-beta1 No fix listed
apache struts = 2.5-beta2 No fix listed
apache struts = 2.5-beta3 No fix listed

References