CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-17530

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.944

EPSS Ranking 100.0%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

Proposed Action

Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.

Ransomware Campaign

Unknown

References

Products affected by CVE-2020-17530

Apache » Struts » Version: 2.0.0

cpe:2.3:a:apache:struts:2.0.0
Apache » Struts » Version: 2.0.1

cpe:2.3:a:apache:struts:2.0.1
Apache » Struts » Version: 2.0.10

cpe:2.3:a:apache:struts:2.0.10
Apache » Struts » Version: 2.0.11

cpe:2.3:a:apache:struts:2.0.11
Apache » Struts » Version: 2.0.11.1

cpe:2.3:a:apache:struts:2.0.11.1
Apache » Struts » Version: 2.0.11.2

cpe:2.3:a:apache:struts:2.0.11.2
Apache » Struts » Version: 2.0.12

cpe:2.3:a:apache:struts:2.0.12
Apache » Struts » Version: 2.0.13

cpe:2.3:a:apache:struts:2.0.13
Apache » Struts » Version: 2.0.14

cpe:2.3:a:apache:struts:2.0.14
Apache » Struts » Version: 2.0.2

cpe:2.3:a:apache:struts:2.0.2
Apache » Struts » Version: 2.0.3

cpe:2.3:a:apache:struts:2.0.3
Apache » Struts » Version: 2.0.4

cpe:2.3:a:apache:struts:2.0.4
Apache » Struts » Version: 2.0.5

cpe:2.3:a:apache:struts:2.0.5
Apache » Struts » Version: 2.0.6

cpe:2.3:a:apache:struts:2.0.6
Apache » Struts » Version: 2.0.7

cpe:2.3:a:apache:struts:2.0.7
Apache » Struts » Version: 2.0.8

cpe:2.3:a:apache:struts:2.0.8
Apache » Struts » Version: 2.0.9

cpe:2.3:a:apache:struts:2.0.9
Apache » Struts » Version: 2.1.0

cpe:2.3:a:apache:struts:2.1.0
Apache » Struts » Version: 2.1.1

cpe:2.3:a:apache:struts:2.1.1
Apache » Struts » Version: 2.1.2

cpe:2.3:a:apache:struts:2.1.2
Apache » Struts » Version: 2.1.3

cpe:2.3:a:apache:struts:2.1.3
Apache » Struts » Version: 2.1.4

cpe:2.3:a:apache:struts:2.1.4
Apache » Struts » Version: 2.1.5

cpe:2.3:a:apache:struts:2.1.5
Apache » Struts » Version: 2.1.6

cpe:2.3:a:apache:struts:2.1.6
Apache » Struts » Version: 2.1.7

cpe:2.3:a:apache:struts:2.1.7
Apache » Struts » Version: 2.1.8

cpe:2.3:a:apache:struts:2.1.8
Apache » Struts » Version: 2.1.8.1

cpe:2.3:a:apache:struts:2.1.8.1
Apache » Struts » Version: 2.2.1

cpe:2.3:a:apache:struts:2.2.1
Apache » Struts » Version: 2.2.1.1

cpe:2.3:a:apache:struts:2.2.1.1
Apache » Struts » Version: 2.2.3

cpe:2.3:a:apache:struts:2.2.3
Apache » Struts » Version: 2.2.3.1

cpe:2.3:a:apache:struts:2.2.3.1
Apache » Struts » Version: 2.3.0

cpe:2.3:a:apache:struts:2.3.0
Apache » Struts » Version: 2.3.1

cpe:2.3:a:apache:struts:2.3.1
Apache » Struts » Version: 2.3.1.1

cpe:2.3:a:apache:struts:2.3.1.1
Apache » Struts » Version: 2.3.1.2

cpe:2.3:a:apache:struts:2.3.1.2
Apache » Struts » Version: 2.3.10

cpe:2.3:a:apache:struts:2.3.10
Apache » Struts » Version: 2.3.11

cpe:2.3:a:apache:struts:2.3.11
Apache » Struts » Version: 2.3.12

cpe:2.3:a:apache:struts:2.3.12
Apache » Struts » Version: 2.3.13

cpe:2.3:a:apache:struts:2.3.13
Apache » Struts » Version: 2.3.14

cpe:2.3:a:apache:struts:2.3.14
Apache » Struts » Version: 2.3.14.1

cpe:2.3:a:apache:struts:2.3.14.1
Apache » Struts » Version: 2.3.14.2

cpe:2.3:a:apache:struts:2.3.14.2
Apache » Struts » Version: 2.3.14.3

cpe:2.3:a:apache:struts:2.3.14.3
Apache » Struts » Version: 2.3.15

cpe:2.3:a:apache:struts:2.3.15
Apache » Struts » Version: 2.3.15.1

cpe:2.3:a:apache:struts:2.3.15.1
Apache » Struts » Version: 2.3.15.2

cpe:2.3:a:apache:struts:2.3.15.2
Apache » Struts » Version: 2.3.15.3

cpe:2.3:a:apache:struts:2.3.15.3
Apache » Struts » Version: 2.3.16

cpe:2.3:a:apache:struts:2.3.16
Apache » Struts » Version: 2.3.16.1

cpe:2.3:a:apache:struts:2.3.16.1
Apache » Struts » Version: 2.3.16.2

cpe:2.3:a:apache:struts:2.3.16.2
Apache » Struts » Version: 2.3.16.3

cpe:2.3:a:apache:struts:2.3.16.3
Apache » Struts » Version: 2.3.17

cpe:2.3:a:apache:struts:2.3.17
Apache » Struts » Version: 2.3.19

cpe:2.3:a:apache:struts:2.3.19
Apache » Struts » Version: 2.3.20

cpe:2.3:a:apache:struts:2.3.20
Apache » Struts » Version: 2.3.20.1

cpe:2.3:a:apache:struts:2.3.20.1
Apache » Struts » Version: 2.3.20.2

cpe:2.3:a:apache:struts:2.3.20.2
Apache » Struts » Version: 2.3.20.3

cpe:2.3:a:apache:struts:2.3.20.3
Apache » Struts » Version: 2.3.21

cpe:2.3:a:apache:struts:2.3.21
Apache » Struts » Version: 2.3.22

cpe:2.3:a:apache:struts:2.3.22
Apache » Struts » Version: 2.3.23

cpe:2.3:a:apache:struts:2.3.23
Apache » Struts » Version: 2.3.24

cpe:2.3:a:apache:struts:2.3.24
Apache » Struts » Version: 2.3.24.1

cpe:2.3:a:apache:struts:2.3.24.1
Apache » Struts » Version: 2.3.24.2

cpe:2.3:a:apache:struts:2.3.24.2
Apache » Struts » Version: 2.3.24.3

cpe:2.3:a:apache:struts:2.3.24.3
Apache » Struts » Version: 2.3.25

cpe:2.3:a:apache:struts:2.3.25
Apache » Struts » Version: 2.3.26

cpe:2.3:a:apache:struts:2.3.26
Apache » Struts » Version: 2.3.27

cpe:2.3:a:apache:struts:2.3.27
Apache » Struts » Version: 2.3.28

cpe:2.3:a:apache:struts:2.3.28
Apache » Struts » Version: 2.3.28.1

cpe:2.3:a:apache:struts:2.3.28.1
Apache » Struts » Version: 2.3.29

cpe:2.3:a:apache:struts:2.3.29
Apache » Struts » Version: 2.3.3

cpe:2.3:a:apache:struts:2.3.3
Apache » Struts » Version: 2.3.30

cpe:2.3:a:apache:struts:2.3.30
Apache » Struts » Version: 2.3.31

cpe:2.3:a:apache:struts:2.3.31
Apache » Struts » Version: 2.3.32

cpe:2.3:a:apache:struts:2.3.32
Apache » Struts » Version: 2.3.33

cpe:2.3:a:apache:struts:2.3.33
Apache » Struts » Version: 2.3.34

cpe:2.3:a:apache:struts:2.3.34
Apache » Struts » Version: 2.3.35

cpe:2.3:a:apache:struts:2.3.35
Apache » Struts » Version: 2.3.36

cpe:2.3:a:apache:struts:2.3.36
Apache » Struts » Version: 2.3.37

cpe:2.3:a:apache:struts:2.3.37
Apache » Struts » Version: 2.3.4

cpe:2.3:a:apache:struts:2.3.4
Apache » Struts » Version: 2.3.4.1

cpe:2.3:a:apache:struts:2.3.4.1
Apache » Struts » Version: 2.3.5

cpe:2.3:a:apache:struts:2.3.5
Apache » Struts » Version: 2.3.6

cpe:2.3:a:apache:struts:2.3.6
Apache » Struts » Version: 2.3.7

cpe:2.3:a:apache:struts:2.3.7
Apache » Struts » Version: 2.3.8

cpe:2.3:a:apache:struts:2.3.8
Apache » Struts » Version: 2.3.9

cpe:2.3:a:apache:struts:2.3.9
Apache » Struts » Version: 2.5

cpe:2.3:a:apache:struts:2.5
Apache » Struts » Version: 2.5.0

cpe:2.3:a:apache:struts:2.5.0
Apache » Struts » Version: 2.5.1

cpe:2.3:a:apache:struts:2.5.1
Apache » Struts » Version: 2.5.10

cpe:2.3:a:apache:struts:2.5.10
Apache » Struts » Version: 2.5.10.1

cpe:2.3:a:apache:struts:2.5.10.1
Apache » Struts » Version: 2.5.11

cpe:2.3:a:apache:struts:2.5.11
Apache » Struts » Version: 2.5.12

cpe:2.3:a:apache:struts:2.5.12
Apache » Struts » Version: 2.5.13

cpe:2.3:a:apache:struts:2.5.13
Apache » Struts » Version: 2.5.14

cpe:2.3:a:apache:struts:2.5.14
Apache » Struts » Version: 2.5.14.1

cpe:2.3:a:apache:struts:2.5.14.1
Apache » Struts » Version: 2.5.15

cpe:2.3:a:apache:struts:2.5.15
Apache » Struts » Version: 2.5.16

cpe:2.3:a:apache:struts:2.5.16
Apache » Struts » Version: 2.5.17

cpe:2.3:a:apache:struts:2.5.17
Apache » Struts » Version: 2.5.18

cpe:2.3:a:apache:struts:2.5.18
Apache » Struts » Version: 2.5.19

cpe:2.3:a:apache:struts:2.5.19
Apache » Struts » Version: 2.5.2

cpe:2.3:a:apache:struts:2.5.2
Apache » Struts » Version: 2.5.20

cpe:2.3:a:apache:struts:2.5.20
Apache » Struts » Version: 2.5.21

cpe:2.3:a:apache:struts:2.5.21
Apache » Struts » Version: 2.5.22

cpe:2.3:a:apache:struts:2.5.22
Apache » Struts » Version: 2.5.23

cpe:2.3:a:apache:struts:2.5.23
Apache » Struts » Version: 2.5.24

cpe:2.3:a:apache:struts:2.5.24
Apache » Struts » Version: 2.5.25

cpe:2.3:a:apache:struts:2.5.25
Apache » Struts » Version: 2.5.26

cpe:2.3:a:apache:struts:2.5.26
Apache » Struts » Version: 2.5.27

cpe:2.3:a:apache:struts:2.5.27
Apache » Struts » Version: 2.5.28

cpe:2.3:a:apache:struts:2.5.28
Apache » Struts » Version: 2.5.29

cpe:2.3:a:apache:struts:2.5.29
Apache » Struts » Version: 2.5.3

cpe:2.3:a:apache:struts:2.5.3
Apache » Struts » Version: 2.5.4

cpe:2.3:a:apache:struts:2.5.4
Apache » Struts » Version: 2.5.5

cpe:2.3:a:apache:struts:2.5.5
Apache » Struts » Version: 2.5.6

cpe:2.3:a:apache:struts:2.5.6
Apache » Struts » Version: 2.5.7

cpe:2.3:a:apache:struts:2.5.7
Apache » Struts » Version: 2.5.8

cpe:2.3:a:apache:struts:2.5.8
Apache » Struts » Version: 2.5.9

cpe:2.3:a:apache:struts:2.5.9
Oracle » Business Intelligence » Version: 12.2.1.3.0

cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0
Oracle » Business Intelligence » Version: 12.2.1.4.0

cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0
Oracle » Communications Diameter Intelligence Hub » Version: 8.0.0

cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.0.0
Oracle » Communications Diameter Intelligence Hub » Version: 8.1.0

cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.1.0
Oracle » Communications Diameter Intelligence Hub » Version: 8.2.0

cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.2.0
Oracle » Communications Diameter Intelligence Hub » Version: 8.2.3

cpe:2.3:a:oracle:communications_diameter_intelligence_hub:8.2.3
Oracle » Communications Policy Management » Version: 12.5.0

cpe:2.3:a:oracle:communications_policy_management:12.5.0
Oracle » Communications Pricing Design Center » Version: 12.0.0.3.0

cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0
Oracle » Financial Services Data Integration Hub » Version: 8.0.3

cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.3
Oracle » Financial Services Data Integration Hub » Version: 8.0.6

cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.6
Oracle » Hospitality Opera 5 » Version: 5.6

cpe:2.3:a:oracle:hospitality_opera_5:5.6
Oracle » Mysql Enterprise Monitor » Version: 8.0.23

cpe:2.3:a:oracle:mysql_enterprise_monitor:8.0.23

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-17530

Products

Pricing

Contact Us