CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-0230

Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.938

EPSS Ranking 99.9%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2019-0230

Apache » Struts » Version: 2.0.0

cpe:2.3:a:apache:struts:2.0.0
Apache » Struts » Version: 2.0.1

cpe:2.3:a:apache:struts:2.0.1
Apache » Struts » Version: 2.0.10

cpe:2.3:a:apache:struts:2.0.10
Apache » Struts » Version: 2.0.11

cpe:2.3:a:apache:struts:2.0.11
Apache » Struts » Version: 2.0.11.1

cpe:2.3:a:apache:struts:2.0.11.1
Apache » Struts » Version: 2.0.11.2

cpe:2.3:a:apache:struts:2.0.11.2
Apache » Struts » Version: 2.0.12

cpe:2.3:a:apache:struts:2.0.12
Apache » Struts » Version: 2.0.13

cpe:2.3:a:apache:struts:2.0.13
Apache » Struts » Version: 2.0.14

cpe:2.3:a:apache:struts:2.0.14
Apache » Struts » Version: 2.0.2

cpe:2.3:a:apache:struts:2.0.2
Apache » Struts » Version: 2.0.3

cpe:2.3:a:apache:struts:2.0.3
Apache » Struts » Version: 2.0.4

cpe:2.3:a:apache:struts:2.0.4
Apache » Struts » Version: 2.0.5

cpe:2.3:a:apache:struts:2.0.5
Apache » Struts » Version: 2.0.6

cpe:2.3:a:apache:struts:2.0.6
Apache » Struts » Version: 2.0.7

cpe:2.3:a:apache:struts:2.0.7
Apache » Struts » Version: 2.0.8

cpe:2.3:a:apache:struts:2.0.8
Apache » Struts » Version: 2.0.9

cpe:2.3:a:apache:struts:2.0.9
Apache » Struts » Version: 2.1.0

cpe:2.3:a:apache:struts:2.1.0
Apache » Struts » Version: 2.1.1

cpe:2.3:a:apache:struts:2.1.1
Apache » Struts » Version: 2.1.2

cpe:2.3:a:apache:struts:2.1.2
Apache » Struts » Version: 2.1.3

cpe:2.3:a:apache:struts:2.1.3
Apache » Struts » Version: 2.1.4

cpe:2.3:a:apache:struts:2.1.4
Apache » Struts » Version: 2.1.5

cpe:2.3:a:apache:struts:2.1.5
Apache » Struts » Version: 2.1.6

cpe:2.3:a:apache:struts:2.1.6
Apache » Struts » Version: 2.1.7

cpe:2.3:a:apache:struts:2.1.7
Apache » Struts » Version: 2.1.8

cpe:2.3:a:apache:struts:2.1.8
Apache » Struts » Version: 2.1.8.1

cpe:2.3:a:apache:struts:2.1.8.1
Apache » Struts » Version: 2.2.1

cpe:2.3:a:apache:struts:2.2.1
Apache » Struts » Version: 2.2.1.1

cpe:2.3:a:apache:struts:2.2.1.1
Apache » Struts » Version: 2.2.3

cpe:2.3:a:apache:struts:2.2.3
Apache » Struts » Version: 2.2.3.1

cpe:2.3:a:apache:struts:2.2.3.1
Apache » Struts » Version: 2.3.0

cpe:2.3:a:apache:struts:2.3.0
Apache » Struts » Version: 2.3.1

cpe:2.3:a:apache:struts:2.3.1
Apache » Struts » Version: 2.3.1.1

cpe:2.3:a:apache:struts:2.3.1.1
Apache » Struts » Version: 2.3.1.2

cpe:2.3:a:apache:struts:2.3.1.2
Apache » Struts » Version: 2.3.10

cpe:2.3:a:apache:struts:2.3.10
Apache » Struts » Version: 2.3.11

cpe:2.3:a:apache:struts:2.3.11
Apache » Struts » Version: 2.3.12

cpe:2.3:a:apache:struts:2.3.12
Apache » Struts » Version: 2.3.13

cpe:2.3:a:apache:struts:2.3.13
Apache » Struts » Version: 2.3.14

cpe:2.3:a:apache:struts:2.3.14
Apache » Struts » Version: 2.3.14.1

cpe:2.3:a:apache:struts:2.3.14.1
Apache » Struts » Version: 2.3.14.2

cpe:2.3:a:apache:struts:2.3.14.2
Apache » Struts » Version: 2.3.14.3

cpe:2.3:a:apache:struts:2.3.14.3
Apache » Struts » Version: 2.3.15

cpe:2.3:a:apache:struts:2.3.15
Apache » Struts » Version: 2.3.15.1

cpe:2.3:a:apache:struts:2.3.15.1
Apache » Struts » Version: 2.3.15.2

cpe:2.3:a:apache:struts:2.3.15.2
Apache » Struts » Version: 2.3.15.3

cpe:2.3:a:apache:struts:2.3.15.3
Apache » Struts » Version: 2.3.16

cpe:2.3:a:apache:struts:2.3.16
Apache » Struts » Version: 2.3.16.1

cpe:2.3:a:apache:struts:2.3.16.1
Apache » Struts » Version: 2.3.16.2

cpe:2.3:a:apache:struts:2.3.16.2
Apache » Struts » Version: 2.3.16.3

cpe:2.3:a:apache:struts:2.3.16.3
Apache » Struts » Version: 2.3.17

cpe:2.3:a:apache:struts:2.3.17
Apache » Struts » Version: 2.3.19

cpe:2.3:a:apache:struts:2.3.19
Apache » Struts » Version: 2.3.20

cpe:2.3:a:apache:struts:2.3.20
Apache » Struts » Version: 2.3.20.1

cpe:2.3:a:apache:struts:2.3.20.1
Apache » Struts » Version: 2.3.20.2

cpe:2.3:a:apache:struts:2.3.20.2
Apache » Struts » Version: 2.3.20.3

cpe:2.3:a:apache:struts:2.3.20.3
Apache » Struts » Version: 2.3.21

cpe:2.3:a:apache:struts:2.3.21
Apache » Struts » Version: 2.3.22

cpe:2.3:a:apache:struts:2.3.22
Apache » Struts » Version: 2.3.23

cpe:2.3:a:apache:struts:2.3.23
Apache » Struts » Version: 2.3.24

cpe:2.3:a:apache:struts:2.3.24
Apache » Struts » Version: 2.3.24.1

cpe:2.3:a:apache:struts:2.3.24.1
Apache » Struts » Version: 2.3.24.2

cpe:2.3:a:apache:struts:2.3.24.2
Apache » Struts » Version: 2.3.24.3

cpe:2.3:a:apache:struts:2.3.24.3
Apache » Struts » Version: 2.3.25

cpe:2.3:a:apache:struts:2.3.25
Apache » Struts » Version: 2.3.26

cpe:2.3:a:apache:struts:2.3.26
Apache » Struts » Version: 2.3.27

cpe:2.3:a:apache:struts:2.3.27
Apache » Struts » Version: 2.3.28

cpe:2.3:a:apache:struts:2.3.28
Apache » Struts » Version: 2.3.28.1

cpe:2.3:a:apache:struts:2.3.28.1
Apache » Struts » Version: 2.3.29

cpe:2.3:a:apache:struts:2.3.29
Apache » Struts » Version: 2.3.3

cpe:2.3:a:apache:struts:2.3.3
Apache » Struts » Version: 2.3.30

cpe:2.3:a:apache:struts:2.3.30
Apache » Struts » Version: 2.3.31

cpe:2.3:a:apache:struts:2.3.31
Apache » Struts » Version: 2.3.32

cpe:2.3:a:apache:struts:2.3.32
Apache » Struts » Version: 2.3.33

cpe:2.3:a:apache:struts:2.3.33
Apache » Struts » Version: 2.3.34

cpe:2.3:a:apache:struts:2.3.34
Apache » Struts » Version: 2.3.35

cpe:2.3:a:apache:struts:2.3.35
Apache » Struts » Version: 2.3.36

cpe:2.3:a:apache:struts:2.3.36
Apache » Struts » Version: 2.3.37

cpe:2.3:a:apache:struts:2.3.37
Apache » Struts » Version: 2.3.4

cpe:2.3:a:apache:struts:2.3.4
Apache » Struts » Version: 2.3.4.1

cpe:2.3:a:apache:struts:2.3.4.1
Apache » Struts » Version: 2.3.5

cpe:2.3:a:apache:struts:2.3.5
Apache » Struts » Version: 2.3.6

cpe:2.3:a:apache:struts:2.3.6
Apache » Struts » Version: 2.3.7

cpe:2.3:a:apache:struts:2.3.7
Apache » Struts » Version: 2.3.8

cpe:2.3:a:apache:struts:2.3.8
Apache » Struts » Version: 2.3.9

cpe:2.3:a:apache:struts:2.3.9
Apache » Struts » Version: 2.5

cpe:2.3:a:apache:struts:2.5
Apache » Struts » Version: 2.5.0

cpe:2.3:a:apache:struts:2.5.0
Apache » Struts » Version: 2.5.1

cpe:2.3:a:apache:struts:2.5.1
Apache » Struts » Version: 2.5.10

cpe:2.3:a:apache:struts:2.5.10
Apache » Struts » Version: 2.5.10.1

cpe:2.3:a:apache:struts:2.5.10.1
Apache » Struts » Version: 2.5.11

cpe:2.3:a:apache:struts:2.5.11
Apache » Struts » Version: 2.5.12

cpe:2.3:a:apache:struts:2.5.12
Apache » Struts » Version: 2.5.13

cpe:2.3:a:apache:struts:2.5.13
Apache » Struts » Version: 2.5.14

cpe:2.3:a:apache:struts:2.5.14
Apache » Struts » Version: 2.5.14.1

cpe:2.3:a:apache:struts:2.5.14.1
Apache » Struts » Version: 2.5.15

cpe:2.3:a:apache:struts:2.5.15
Apache » Struts » Version: 2.5.16

cpe:2.3:a:apache:struts:2.5.16
Apache » Struts » Version: 2.5.17

cpe:2.3:a:apache:struts:2.5.17
Apache » Struts » Version: 2.5.18

cpe:2.3:a:apache:struts:2.5.18
Apache » Struts » Version: 2.5.19

cpe:2.3:a:apache:struts:2.5.19
Apache » Struts » Version: 2.5.2

cpe:2.3:a:apache:struts:2.5.2
Apache » Struts » Version: 2.5.20

cpe:2.3:a:apache:struts:2.5.20
Apache » Struts » Version: 2.5.3

cpe:2.3:a:apache:struts:2.5.3
Apache » Struts » Version: 2.5.4

cpe:2.3:a:apache:struts:2.5.4
Apache » Struts » Version: 2.5.5

cpe:2.3:a:apache:struts:2.5.5
Apache » Struts » Version: 2.5.6

cpe:2.3:a:apache:struts:2.5.6
Apache » Struts » Version: 2.5.7

cpe:2.3:a:apache:struts:2.5.7
Apache » Struts » Version: 2.5.8

cpe:2.3:a:apache:struts:2.5.8
Apache » Struts » Version: 2.5.9

cpe:2.3:a:apache:struts:2.5.9
Oracle » Communications Policy Management » Version: 12.5.0

cpe:2.3:a:oracle:communications_policy_management:12.5.0
Oracle » Financial Services Data Integration Hub » Version: 8.0.3

cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.3
Oracle » Financial Services Data Integration Hub » Version: 8.0.6

cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.6
Oracle » Financial Services Market Risk Measurement And Management » Version: 8.0.6

cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6
Oracle » Mysql Enterprise Monitor » Version: N/A

cpe:2.3:a:oracle:mysql_enterprise_monitor:-
Oracle » Mysql Enterprise Monitor » Version: 2.3.14

cpe:2.3:a:oracle:mysql_enterprise_monitor:2.3.14
Oracle » Mysql Enterprise Monitor » Version: 3.0.25

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.25
Oracle » Mysql Enterprise Monitor » Version: 3.0.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.0.4
Oracle » Mysql Enterprise Monitor » Version: 3.1.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.0
Oracle » Mysql Enterprise Monitor » Version: 3.1.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.1
Oracle » Mysql Enterprise Monitor » Version: 3.1.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.2
Oracle » Mysql Enterprise Monitor » Version: 3.1.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3
Oracle » Mysql Enterprise Monitor » Version: 3.1.3.7856

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.3.7856
Oracle » Mysql Enterprise Monitor » Version: 3.1.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.4
Oracle » Mysql Enterprise Monitor » Version: 3.1.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.5
Oracle » Mysql Enterprise Monitor » Version: 3.1.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6
Oracle » Mysql Enterprise Monitor » Version: 3.1.6.8003

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.6.8003
Oracle » Mysql Enterprise Monitor » Version: 3.1.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.1.7
Oracle » Mysql Enterprise Monitor » Version: 3.2.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.0
Oracle » Mysql Enterprise Monitor » Version: 3.2.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1
Oracle » Mysql Enterprise Monitor » Version: 3.2.10

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.10
Oracle » Mysql Enterprise Monitor » Version: 3.2.1182

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.1182
Oracle » Mysql Enterprise Monitor » Version: 3.2.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.2
Oracle » Mysql Enterprise Monitor » Version: 3.2.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.3
Oracle » Mysql Enterprise Monitor » Version: 3.2.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.4
Oracle » Mysql Enterprise Monitor » Version: 3.2.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.5
Oracle » Mysql Enterprise Monitor » Version: 3.2.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.6
Oracle » Mysql Enterprise Monitor » Version: 3.2.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.7
Oracle » Mysql Enterprise Monitor » Version: 3.2.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8
Oracle » Mysql Enterprise Monitor » Version: 3.2.8.2223

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.8.2223
Oracle » Mysql Enterprise Monitor » Version: 3.2.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.2.9
Oracle » Mysql Enterprise Monitor » Version: 3.3.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.0
Oracle » Mysql Enterprise Monitor » Version: 3.3.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.1
Oracle » Mysql Enterprise Monitor » Version: 3.3.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2
Oracle » Mysql Enterprise Monitor » Version: 3.3.2.1162

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.2.1162
Oracle » Mysql Enterprise Monitor » Version: 3.3.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.3
Oracle » Mysql Enterprise Monitor » Version: 3.3.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4
Oracle » Mysql Enterprise Monitor » Version: 3.3.4.3247

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.4.3247
Oracle » Mysql Enterprise Monitor » Version: 3.3.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.5
Oracle » Mysql Enterprise Monitor » Version: 3.3.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6
Oracle » Mysql Enterprise Monitor » Version: 3.3.6.3293

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.6.3293
Oracle » Mysql Enterprise Monitor » Version: 3.3.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.7
Oracle » Mysql Enterprise Monitor » Version: 3.3.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.8
Oracle » Mysql Enterprise Monitor » Version: 3.3.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.3.9
Oracle » Mysql Enterprise Monitor » Version: 3.4.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.0
Oracle » Mysql Enterprise Monitor » Version: 3.4.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.1
Oracle » Mysql Enterprise Monitor » Version: 3.4.10

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.10
Oracle » Mysql Enterprise Monitor » Version: 3.4.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2
Oracle » Mysql Enterprise Monitor » Version: 3.4.2.4181

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.2.4181
Oracle » Mysql Enterprise Monitor » Version: 3.4.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.3
Oracle » Mysql Enterprise Monitor » Version: 3.4.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4
Oracle » Mysql Enterprise Monitor » Version: 3.4.4.4226

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.4.4226
Oracle » Mysql Enterprise Monitor » Version: 3.4.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.5
Oracle » Mysql Enterprise Monitor » Version: 3.4.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.6
Oracle » Mysql Enterprise Monitor » Version: 3.4.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7
Oracle » Mysql Enterprise Monitor » Version: 3.4.7.4297

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.7.4297
Oracle » Mysql Enterprise Monitor » Version: 3.4.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.8
Oracle » Mysql Enterprise Monitor » Version: 3.4.9

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9
Oracle » Mysql Enterprise Monitor » Version: 3.4.9.4237

cpe:2.3:a:oracle:mysql_enterprise_monitor:3.4.9.4237
Oracle » Mysql Enterprise Monitor » Version: 4.0.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0
Oracle » Mysql Enterprise Monitor » Version: 4.0.0.5135

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.0.5135
Oracle » Mysql Enterprise Monitor » Version: 4.0.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.1
Oracle » Mysql Enterprise Monitor » Version: 4.0.11.5331

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.11.5331
Oracle » Mysql Enterprise Monitor » Version: 4.0.12

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.12
Oracle » Mysql Enterprise Monitor » Version: 4.0.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.2
Oracle » Mysql Enterprise Monitor » Version: 4.0.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.3
Oracle » Mysql Enterprise Monitor » Version: 4.0.4

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4
Oracle » Mysql Enterprise Monitor » Version: 4.0.4.5235

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.4.5235
Oracle » Mysql Enterprise Monitor » Version: 4.0.5

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.5
Oracle » Mysql Enterprise Monitor » Version: 4.0.6

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6
Oracle » Mysql Enterprise Monitor » Version: 4.0.6.5281

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.6.5281
Oracle » Mysql Enterprise Monitor » Version: 4.0.7

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.7
Oracle » Mysql Enterprise Monitor » Version: 4.0.8

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.0.8
Oracle » Mysql Enterprise Monitor » Version: 4.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:4.1
Oracle » Mysql Enterprise Monitor » Version: 8.0.0

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0
Oracle » Mysql Enterprise Monitor » Version: 8.0.0.8131

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.0.8131
Oracle » Mysql Enterprise Monitor » Version: 8.0.1

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.1
Oracle » Mysql Enterprise Monitor » Version: 8.0.14

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.14
Oracle » Mysql Enterprise Monitor » Version: 8.0.18.1217

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.18.1217
Oracle » Mysql Enterprise Monitor » Version: 8.0.2

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2
Oracle » Mysql Enterprise Monitor » Version: 8.0.2.8191

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.2.8191
Oracle » Mysql Enterprise Monitor » Version: 8.0.20

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.20
Oracle » Mysql Enterprise Monitor » Version: 8.0.21

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.21
Oracle » Mysql Enterprise Monitor » Version: 8.0.22

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.22
Oracle » Mysql Enterprise Monitor » Version: 8.0.23

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.23
Oracle » Mysql Enterprise Monitor » Version: 8.0.3

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-0230

Products

Pricing

Contact Us