CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-3081

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.965

EPSS Ranking 99.9%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 9.3

Proposed Action

Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled.

Ransomware Campaign

Unknown

References

Products affected by CVE-2016-3081

Apache » Struts » Version: 2.3.20

cpe:2.3:a:apache:struts:2.3.20
Apache » Struts » Version: 2.3.20.1

cpe:2.3:a:apache:struts:2.3.20.1
Apache » Struts » Version: 2.3.20.2

cpe:2.3:a:apache:struts:2.3.20.2
Apache » Struts » Version: 2.3.21

cpe:2.3:a:apache:struts:2.3.21
Apache » Struts » Version: 2.3.22

cpe:2.3:a:apache:struts:2.3.22
Apache » Struts » Version: 2.3.23

cpe:2.3:a:apache:struts:2.3.23
Apache » Struts » Version: 2.3.24

cpe:2.3:a:apache:struts:2.3.24
Apache » Struts » Version: 2.3.24.1

cpe:2.3:a:apache:struts:2.3.24.1
Apache » Struts » Version: 2.3.24.2

cpe:2.3:a:apache:struts:2.3.24.2
Apache » Struts » Version: 2.3.25

cpe:2.3:a:apache:struts:2.3.25
Apache » Struts » Version: 2.3.26

cpe:2.3:a:apache:struts:2.3.26
Apache » Struts » Version: 2.3.27

cpe:2.3:a:apache:struts:2.3.27
Apache » Struts » Version: 2.3.28

cpe:2.3:a:apache:struts:2.3.28
Huawei » Anyoffice » Version: v200r005c00

cpe:2.3:a:huawei:anyoffice:v200r005c00
Huawei » Anyoffice » Version: v200r006c00

cpe:2.3:a:huawei:anyoffice:v200r006c00
Huawei » Logcenter » Version: v100r001c10

cpe:2.3:a:huawei:logcenter:v100r001c10
Huawei » Logcenter » Version: v100r001c20

cpe:2.3:a:huawei:logcenter:v100r001c20
Oracle » Flexcube Private Banking » Version: 12.0.1

cpe:2.3:a:oracle:flexcube_private_banking:12.0.1
Oracle » Flexcube Private Banking » Version: 12.0.3

cpe:2.3:a:oracle:flexcube_private_banking:12.0.3
Oracle » Flexcube Private Banking » Version: 12.1.0

cpe:2.3:a:oracle:flexcube_private_banking:12.1.0
Oracle » Flexcube Private Banking » Version: 2.0.0.0

cpe:2.3:a:oracle:flexcube_private_banking:2.0.0.0
Oracle » Flexcube Private Banking » Version: 2.0.1

cpe:2.3:a:oracle:flexcube_private_banking:2.0.1
Oracle » Flexcube Private Banking » Version: 2.2.0

cpe:2.3:a:oracle:flexcube_private_banking:2.2.0
Oracle » Micros Retail Xbri Loss Prevention » Version: 10.0.1

cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.0.1
Oracle » Micros Retail Xbri Loss Prevention » Version: 10.5.0

cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.5.0
Oracle » Micros Retail Xbri Loss Prevention » Version: 10.6.0

cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.6.0
Oracle » Micros Retail Xbri Loss Prevention » Version: 10.7.0

cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.7.0
Oracle » Micros Retail Xbri Loss Prevention » Version: 10.8.0

cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.0
Oracle » Micros Retail Xbri Loss Prevention » Version: 10.8.1

cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.1
Oracle » Siebel E-Billing » Version: 7.1

cpe:2.3:a:oracle:siebel_e-billing:7.1
Huawei » Agile Controller-Campus » Version: N/A

cpe:2.3:h:huawei:agile_controller-campus:-
Huawei » Firehunter6000 » Version: N/A

cpe:2.3:h:huawei:firehunter6000:-
Huawei » Oceanstor 18500 V3 » Version: N/A

cpe:2.3:h:huawei:oceanstor_18500_v3:-
Huawei » Oceanstor 18500f » Version: v3

cpe:2.3:h:huawei:oceanstor_18500f:v3
Huawei » Oceanstor 18800 V3 » Version: N/A

cpe:2.3:h:huawei:oceanstor_18800_v3:-
Huawei » Oceanstor 18800f » Version: v3

cpe:2.3:h:huawei:oceanstor_18800f:v3
Huawei » Oceanstor 5300 V3 » Version: N/A

cpe:2.3:h:huawei:oceanstor_5300_v3:-
Huawei » Oceanstor 5500 V3 » Version: N/A

cpe:2.3:h:huawei:oceanstor_5500_v3:-
Huawei » Oceanstor 5600 V3 » Version: N/A

cpe:2.3:h:huawei:oceanstor_5600_v3:-
Huawei » Oceanstor 5800 V3 » Version: N/A

cpe:2.3:h:huawei:oceanstor_5800_v3:-
Huawei » Oceanstor 6800 V3 » Version: N/A

cpe:2.3:h:huawei:oceanstor_6800_v3:-
Huawei » Oceanstor 9000 » Version: N/A

cpe:2.3:h:huawei:oceanstor_9000:-
Huawei » Oceanstor N8500 » Version: N/A

cpe:2.3:h:huawei:oceanstor_n8500:-
Huawei » Oceanstor Onebox » Version: N/A

cpe:2.3:h:huawei:oceanstor_onebox:-
Huawei » Agile Controller-Campus Firmware » Version: v100r002c00

cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c00
Huawei » Firehunter6000 Firmware » Version: v100r001c20

cpe:2.3:o:huawei:firehunter6000_firmware:v100r001c20
Huawei » Oceanstor 18500 V3 Firmware » Version: v300r001

cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r001
Huawei » Oceanstor 18500 V3 Firmware » Version: v300r002

cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r002
Huawei » Oceanstor 18500 V3 Firmware » Version: v300r003c00

cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r003c00
Huawei » Oceanstor 18500 V3 Firmware » Version: v300r003c10

cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r003c10
Huawei » Oceanstor 18500f Firmware » Version: v300r001

cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r001
Huawei » Oceanstor 18500f Firmware » Version: v300r002

cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r002
Huawei » Oceanstor 18500f Firmware » Version: v300r003c00

cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r003c00
Huawei » Oceanstor 18500f Firmware » Version: v300r003c10

cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r003c10
Huawei » Oceanstor 18800 V3 Firmware » Version: v300r001

cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r001
Huawei » Oceanstor 18800 V3 Firmware » Version: v300r002

cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r002
Huawei » Oceanstor 18800 V3 Firmware » Version: v300r003c00

cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r003c00
Huawei » Oceanstor 18800 V3 Firmware » Version: v300r003c10

cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r003c10
Huawei » Oceanstor 18800f Firmware » Version: v300r001

cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r001
Huawei » Oceanstor 18800f Firmware » Version: v300r002

cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r002
Huawei » Oceanstor 18800f Firmware » Version: v300r003c00

cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r003c00
Huawei » Oceanstor 18800f Firmware » Version: v300r003c10

cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r003c10
Huawei » Oceanstor 5300 V3 Firmware » Version: v300r001

cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r001
Huawei » Oceanstor 5300 V3 Firmware » Version: v300r002

cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r002
Huawei » Oceanstor 5300 V3 Firmware » Version: v300r003c00

cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r003c00
Huawei » Oceanstor 5300 V3 Firmware » Version: v300r003c10

cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r003c10
Huawei » Oceanstor 5500 V3 Firmware » Version: v300r001

cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r001
Huawei » Oceanstor 5500 V3 Firmware » Version: v300r002

cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r002
Huawei » Oceanstor 5500 V3 Firmware » Version: v300r003c00

cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r003c00
Huawei » Oceanstor 5500 V3 Firmware » Version: v300r003c10

cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r003c10
Huawei » Oceanstor 5600 V3 Firmware » Version: v300r001

cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r001
Huawei » Oceanstor 5600 V3 Firmware » Version: v300r002

cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r002
Huawei » Oceanstor 5600 V3 Firmware » Version: v300r003c00

cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r003c00
Huawei » Oceanstor 5600 V3 Firmware » Version: v300r003c10

cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r003c10
Huawei » Oceanstor 5800 V3 Firmware » Version: v300r001

cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r001
Huawei » Oceanstor 5800 V3 Firmware » Version: v300r002

cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r002
Huawei » Oceanstor 5800 V3 Firmware » Version: v300r003c00

cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r003c00
Huawei » Oceanstor 5800 V3 Firmware » Version: v300r003c10

cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r003c10
Huawei » Oceanstor 6800 V3 Firmware » Version: v300r001

cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r001
Huawei » Oceanstor 6800 V3 Firmware » Version: v300r002

cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r002
Huawei » Oceanstor 6800 V3 Firmware » Version: v300r003c00

cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r003c00
Huawei » Oceanstor 6800 V3 Firmware » Version: v300r003c10

cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r003c10
Huawei » Oceanstor 9000 Firmware » Version: v100r001c01

cpe:2.3:o:huawei:oceanstor_9000_firmware:v100r001c01
Huawei » Oceanstor 9000 Firmware » Version: v100r001c30

cpe:2.3:o:huawei:oceanstor_9000_firmware:v100r001c30
Huawei » Oceanstor 9000 Firmware » Version: v300r005c00

cpe:2.3:o:huawei:oceanstor_9000_firmware:v300r005c00
Huawei » Oceanstor N8500 Firmware » Version: v200r001c09spc505

cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c09spc505
Huawei » Oceanstor N8500 Firmware » Version: v200r001c91spc205

cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c91spc205
Huawei » Oceanstor N8500 Firmware » Version: v200r001c91spc900

cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c91spc900
Huawei » Oceanstor N8500 Firmware » Version: v200r001c91spc901

cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c91spc901
Huawei » Oceanstor Onebox Firmware » Version: v100r003c10

cpe:2.3:o:huawei:oceanstor_onebox_firmware:v100r003c10

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-3081

Products

Pricing

Contact Us