| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.struts:struts2-rest-plugin | ≥ 2.5.0, < 2.5.16 | 2.5.16 |
| struts | ≥ 2.5, ≤ 2.5.14 | |
| agile plm framework | = 9.3.6 | |
| enterprise manager for virtualization | = 13.2.2= 13.2.3 | |
| financial services hedge management and ifrs valuations | = 8.0.4= 8.0.5 | |
| financial services market risk measurement and management | = 8.0.5 | |
| jd edwards enterpriseone tools | = 9.2 | |
| retail order broker | = 5.2 | |
| retail xstore point of service | = 15.0.1= 16.0.2= 6.5.11= 7.0.6= 7.1.6 | |
| webcenter portal | = 12.2.1.2.0= 12.2.1.3.0 | |
| weblogic server | = 12.2.1.2= 12.2.1.3 |
In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free