{"vulnerability": "cve-2017-9791", "sightings": [{"uuid": "25d5d089-e01a-495c-baee-d879f56cb759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "MISP/b60ecd6e-648d-4bc4-a6ad-3527a2216be1", "content": "", "creation_timestamp": "2020-10-09T13:26:51.000000Z"}, {"uuid": "8d56d4b2-435e-42a3-a393-42ee528b3c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "MISP/e1d58ad8-7800-491b-a63b-a03d081914d4", "content": "", "creation_timestamp": "2020-06-25T12:24:13.000000Z"}, {"uuid": "76d4cf90-7690-4307-8bd3-70ffdd677846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "3ae6f2c9-2ea4-4455-87f4-a8c1a06e9176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "https://www.exploit-db.com/exploits/44643", "content": "", "creation_timestamp": "2018-05-17T00:00:00.000000Z"}, {"uuid": "28dc810a-9f24-4be9-a7a1-58768948f0c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "https://www.exploit-db.com/exploits/42324", "content": "", "creation_timestamp": "2017-07-07T00:00:00.000000Z"}, {"uuid": "2e500886-c0b0-4cbb-b196-5c631990a209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971248", "content": "", "creation_timestamp": "2024-12-24T20:26:28.899166Z"}, {"uuid": "3b405e68-1267-4606-85cb-65319ec7452a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"}, {"uuid": "1b3d7990-e3c5-4c4f-863a-a7a113db0629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:01.000000Z"}, {"uuid": "0b1e856f-9bb9-4376-9c3a-1d0e8e201cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:17.000000Z"}, {"uuid": "f3755001-636e-4843-8985-923e9f74d76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts2_code_exec_showcase.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "aae7b8e2-bfec-42cf-8127-5d9b4ccfcda0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "https://gist.github.com/winterswang/4908fd900e5f5a047bafb32001894038", "content": "", "creation_timestamp": "2026-03-11T04:03:33.000000Z"}, {"uuid": "567dc5c8-71d1-497d-a278-eb5b0c84190f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/48c880d0-1b5c-47ab-a19a-0776f7b6859a", "content": "", "creation_timestamp": "2026-02-02T12:28:24.176963Z"}, {"uuid": "4a00b554-62e4-4065-b906-8ce1c1bf2680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "https://t.me/arpsyndicate/1485", "content": "#ExploitObserverAlert\n\nCVE-2017-9791\n\nDESCRIPTION: Exploit Observer has 49 entries related to CVE-2017-9791. The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.\n\nFIRST-EPSS: 0.974480000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-06T12:57:14.000000Z"}, {"uuid": "ce148118-548f-4bfe-ae5b-ec5da7585e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "https://t.me/arpsyndicate/217", "content": "#ExploitObserverAlert\n\nCVE-2017-9791\n\nDESCRIPTION: Exploit Observer has 46 entries related to CVE-2017-9791. The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.\n\nFIRST-EPSS: 0.974480000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-17T06:04:08.000000Z"}, {"uuid": "60f9233c-3cd0-4c0d-9a4c-d264a6f577bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "https://t.me/canyoupwnme/1757", "content": "Examining CVE-2017-9791: New Apache Struts Remote Code Execution Vulnerability\nhttp://blog.trendmicro.com/trendlabs-security-intelligence/examining-cve-2017-9791-new-apache-struts-remote-code-execution-vulnerability/", "creation_timestamp": "2017-07-13T23:10:18.000000Z"}, {"uuid": "d0ae9b17-e8ea-4f6e-8dfe-71943ed166a4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a55a1b94-d512-49cf-b84a-da6be3481e10", "content": "", "creation_timestamp": "2026-06-19T12:47:39.166546Z"}, {"uuid": "4ae3db55-8231-451a-9c77-6d8f0108420e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0d1b7a9e-31e1-4180-8257-df5431d859d9", "content": "", "creation_timestamp": "2026-06-23T14:04:56.374238Z"}, {"uuid": "656abcb2-ecbe-4616-815a-dfb80ff9323e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-20)", "content": "", "creation_timestamp": "2026-09-21T10:15:06.728105Z"}, {"uuid": "1b57dbf4-cc6d-46d3-b884-7e581c1d306c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-21)", "content": "", "creation_timestamp": "2026-09-22T10:00:06.736591Z"}, {"uuid": "7df84b17-769e-4192-a23a-07dbac1ffad3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-22)", "content": "", "creation_timestamp": "2026-09-23T10:15:08.139999Z"}, {"uuid": "0a18c9f0-273b-485c-8c1a-de1d0d00df7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-23)", "content": "", "creation_timestamp": "2026-09-23T00:00:00.000000Z"}, {"uuid": "69724431-4343-4d95-b4d4-064964a2a471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-24)", "content": "", "creation_timestamp": "2026-09-24T00:00:00.000000Z"}, {"uuid": "98bf584f-3fba-4e7f-b2d1-2fe2f87f19f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-26)", "content": "", "creation_timestamp": "2026-09-26T00:00:00.000000Z"}, {"uuid": "3aa10953-cce1-46e1-a52b-4fe024087e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-27)", "content": "", "creation_timestamp": "2026-09-27T00:00:00.000000Z"}, {"uuid": "3a3127b3-6835-4445-87ba-eb91dcac474b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-28)", "content": "", "creation_timestamp": "2026-09-28T00:00:00.000000Z"}, {"uuid": "300354cc-cc4d-4fc6-b739-a6465a24150b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-9791", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-10-03)", "content": "", "creation_timestamp": "2026-10-03T00:00:00.000000Z"}]}