VDB
GCVE-110-CERTCC-2017-112992
GCVE-110-CERTCC-2017-112992
Advisory PublishedCVSS 10.0/10
Apache Struts 2 framework, versions 2.5 to 2.5.12, with REST plugin insecurely deserializes untrusted XML data. A remote, unauthenticated attacker can leverage this vulnerability to execute arbitrary code in the context of the Struts application.
Risk Scores
CVSS 2.0
10.0/10
Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact4d1_population4d1_direct_report0
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score8.3remediation_levelOFreport_confidenceCenvironmental_score8.26044988608target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND
Aliases
References
Browse GCVE Records
72,148 records in the GCVE database · Updated July 14, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.