Vulnerability Details CVE-2016-4436
Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.081
EPSS Ranking 91.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2016-4436
-
cpe:2.3:a:apache:struts:2.0.0
-
cpe:2.3:a:apache:struts:2.0.1
-
cpe:2.3:a:apache:struts:2.0.11
-
cpe:2.3:a:apache:struts:2.0.11.1
-
cpe:2.3:a:apache:struts:2.0.11.2
-
cpe:2.3:a:apache:struts:2.0.12
-
cpe:2.3:a:apache:struts:2.0.14
-
cpe:2.3:a:apache:struts:2.0.2
-
cpe:2.3:a:apache:struts:2.0.3
-
cpe:2.3:a:apache:struts:2.0.4
-
cpe:2.3:a:apache:struts:2.0.5
-
cpe:2.3:a:apache:struts:2.0.6
-
cpe:2.3:a:apache:struts:2.0.7
-
cpe:2.3:a:apache:struts:2.0.8
-
cpe:2.3:a:apache:struts:2.0.9
-
cpe:2.3:a:apache:struts:2.1.6
-
cpe:2.3:a:apache:struts:2.1.8
-
cpe:2.3:a:apache:struts:2.1.8.1
-
cpe:2.3:a:apache:struts:2.2.1
-
cpe:2.3:a:apache:struts:2.2.1.1
-
cpe:2.3:a:apache:struts:2.2.3
-
cpe:2.3:a:apache:struts:2.2.3.1
-
cpe:2.3:a:apache:struts:2.3.1
-
cpe:2.3:a:apache:struts:2.3.1.1
-
cpe:2.3:a:apache:struts:2.3.1.2
-
cpe:2.3:a:apache:struts:2.3.12
-
cpe:2.3:a:apache:struts:2.3.14
-
cpe:2.3:a:apache:struts:2.3.14.1
-
cpe:2.3:a:apache:struts:2.3.14.2
-
cpe:2.3:a:apache:struts:2.3.14.3
-
cpe:2.3:a:apache:struts:2.3.15
-
cpe:2.3:a:apache:struts:2.3.15.1
-
cpe:2.3:a:apache:struts:2.3.15.2
-
cpe:2.3:a:apache:struts:2.3.15.3
-
cpe:2.3:a:apache:struts:2.3.16
-
cpe:2.3:a:apache:struts:2.3.16.1
-
cpe:2.3:a:apache:struts:2.3.16.2
-
cpe:2.3:a:apache:struts:2.3.16.3
-
cpe:2.3:a:apache:struts:2.3.20
-
cpe:2.3:a:apache:struts:2.3.20.1
-
cpe:2.3:a:apache:struts:2.3.20.3
-
cpe:2.3:a:apache:struts:2.3.24
-
cpe:2.3:a:apache:struts:2.3.24.1
-
cpe:2.3:a:apache:struts:2.3.24.3
-
cpe:2.3:a:apache:struts:2.3.28
-
cpe:2.3:a:apache:struts:2.3.28.1
-
cpe:2.3:a:apache:struts:2.3.3
-
cpe:2.3:a:apache:struts:2.3.4
-
cpe:2.3:a:apache:struts:2.3.4.1
-
cpe:2.3:a:apache:struts:2.3.7
-
cpe:2.3:a:apache:struts:2.3.8
-
cpe:2.3:a:apache:struts:2.5