| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.struts:struts2-core | ≥ 2.0.0, < 2.5.22 | 2.5.22 |
| struts | ≥ 2.0.0, ≤ 2.5.20 | |
| communications policy management | = 12.5.0 | |
| financial services data integration hub | = 8.0.3= 8.0.6 | |
| financial services market risk measurement and management | = 8.0.6 | |
| mysql enterprise monitor | ≤ 8.0.23 |
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free