CVE-2016-4632

Risk Scores

Exploit Intelligence

• Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
• Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
• Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
• Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
• Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
• Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
• Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
• Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
• A practical lab demonstrating the exploitation of a critical Remote Code Execution (RCE) vulnerability in Apache Struts2 (CVE-2017-5638) using Vulhub Docker environments. Includes setup instructions and commands to run the vulnerable container. (github-poc)
• A practical lab demonstrating the exploitation of a critical Remote Code Execution (RCE) vulnerability in Apache Struts2 (CVE-2017-5638) using Vulhub Docker environments. Includes setup instructions and commands to run the vulnerable container. (github-poc)

…and 354 more exploits

Timeline

• Jul 19, 2016 CVE Published
• Oct 2, 2020 PoC Published
• Nov 6, 2020 PoC Published
• Sep 6, 2021 PoC Published
• Feb 4, 2022 EPSS Score
• Mar 29, 2022 EPSS Score
• Jul 12, 2022 EPSS Score
• Sep 3, 2022 EPSS Score
• Oct 26, 2022 EPSS Score
• Dec 18, 2022 EPSS Score
• Apr 2, 2023 EPSS Score
• May 12, 2023 EPSS Score

References

• https://support.apple.com/en-us/HT206902 advisory
• https://support.apple.com/en-us/HT206905 advisory
• https://support.apple.com/en-us/HT206903 advisory
• https://support.apple.com/en-us/HT206901 advisory
• https://support.apple.com/en-us/HT206904 advisory
• https://support.apple.com/en-us/HT206899 advisory
• https://support.apple.com/en-us/HT206900 advisory