GCVE-110-CERTCC-2017-834067

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published March 6, 2017

Apache Struts, versions 2.3.5 - 2.3.31 and 2.5 - 2.5.10, is vulnerable to code injection leading to remote code execution (RCE).

Download JSON Open in Console

Risk Scores

CVSS 2.0

10.0/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report0

certcc-cvss-temporal-env

temporal_score8.7remediation_levelOFreport_confidenceCenvironmental_score8.6952104064target_distributionHenvironmental_vectorCDP:N/TD:H/CR:ND/IR:ND/AR:ND

Aliases

CVE-2017-5638

References

Apache Struts 2 is vulnerable to remote code execution

url

Apache Struts 2 is vulnerable to remote code execution

url

Apache Struts 2 is vulnerable to remote code execution

url

Apache Struts 2 is vulnerable to remote code execution

url

Apache Struts 2 is vulnerable to remote code execution

url

Apache Struts 2 is vulnerable to remote code execution

advisory

Apache Struts 2 is vulnerable to remote code execution

discussion

Apache Struts 2 is vulnerable to remote code execution

exploit

Browse GCVE Records

73,040 records in the GCVE database · Updated July 15, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON