FKIE_CVE-2016-3081
Vulnerability from fkie_nvd - Published: 2016-04-26 14:59 - Updated: 2026-10-09 14:43
Severity
8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
8.1 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
8.1 (High) - CVSS:3.1/
Summary
Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
References
Impacted products
{
"affected": [
{
"affectedData": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"source": "secalert@redhat.com"
}
],
"cisaActionDue": "2026-10-11",
"cisaExploitAdd": "2026-10-08",
"cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA\u2019s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA\u2019s \u201cForensics Triage Requirements\u201d (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset\u0027s internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"cisaVulnerabilityName": "Apache Struts Command Injection Vulnerability",
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c00:*:*:*:*:*:*:*",
"matchCriteriaId": "A6B574A3-5FCD-4F3E-932D-10334180F4F0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:agile_controller-campus:-:*:*:*:*:*:*:*",
"matchCriteriaId": "592559FB-7551-4327-9ECE-9325F4173C85",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:huawei:anyoffice:v200r005c00:*:*:*:*:*:*:*",
"matchCriteriaId": "DC8BA17C-DEAE-4B36-8370-FA7A96617F1E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:huawei:anyoffice:v200r006c00:*:*:*:*:*:*:*",
"matchCriteriaId": "86CDD9C0-F57E-4D38-9F59-2BBFC9BBCC2D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:huawei:logcenter:v100r001c10:*:*:*:*:*:*:*",
"matchCriteriaId": "8AD26462-FE5D-4723-9CB6-8D2C2CF70CA9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:huawei:logcenter:v100r001c20:*:*:*:*:*:*:*",
"matchCriteriaId": "BC779782-2331-4DB0-A46B-88E548420D56",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:firehunter6000_firmware:v100r001c20:*:*:*:*:*:*:*",
"matchCriteriaId": "2E5D4BDB-42B2-46F4-A5EB-4209ABC40E0A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:firehunter6000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A4AC09A1-7A65-4C21-BA7C-4E84025F2785",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r001:*:*:*:*:*:*:*",
"matchCriteriaId": "6D1F47D6-0E88-4CE0-946B-21263AD80857",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r002:*:*:*:*:*:*:*",
"matchCriteriaId": "C43A859E-0DED-4652-B39F-3A721EB01413",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r003c00:*:*:*:*:*:*:*",
"matchCriteriaId": "CE3697CF-07B1-4034-8C6F-BC5D222A2549",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r003c10:*:*:*:*:*:*:*",
"matchCriteriaId": "D07C0D95-4066-48E1-9F2A-5E4A613E8CC8",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_5300_v3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A3DF80EC-7002-471B-BC99-E62F0946820A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r001:*:*:*:*:*:*:*",
"matchCriteriaId": "904B66FF-0A01-45B8-AD4E-1B44F0278619",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r002:*:*:*:*:*:*:*",
"matchCriteriaId": "256CE21D-19E6-4E51-B4D4-C0144D2CABA3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r003c00:*:*:*:*:*:*:*",
"matchCriteriaId": "54E09645-8F9E-4E6B-9EB9-A8E3BD2D5F65",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r003c10:*:*:*:*:*:*:*",
"matchCriteriaId": "2A0BB1FA-5CAD-4170-8CDD-A41ACB1FE465",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_5500_v3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "7B0661A5-2FDE-4091-89AA-0524895688E8",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r001:*:*:*:*:*:*:*",
"matchCriteriaId": "5CE11250-3CAA-4A5D-A49A-7DC41D6A9CCD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r002:*:*:*:*:*:*:*",
"matchCriteriaId": "DF2A109C-C741-4808-BA5A-16474D3D36A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r003c00:*:*:*:*:*:*:*",
"matchCriteriaId": "A9FB2847-151D-4383-8693-9AF0337D609B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r003c10:*:*:*:*:*:*:*",
"matchCriteriaId": "8DB3F6A6-AF81-46B2-9935-E74CB06276A5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_5600_v3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B68296A9-DC80-458D-9456-3F21E6FB56BE",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r001:*:*:*:*:*:*:*",
"matchCriteriaId": "4C30F945-D6B3-4C15-A8D3-9767DEBB6859",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r002:*:*:*:*:*:*:*",
"matchCriteriaId": "002C68AB-3C4F-4F25-98CF-8A7A4317BBF8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r003c00:*:*:*:*:*:*:*",
"matchCriteriaId": "856D8481-B32E-458A-94EE-99C2063ACECC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r003c10:*:*:*:*:*:*:*",
"matchCriteriaId": "10232935-0024-4DD4-BD96-286FE6398457",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_5800_v3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "524A38D1-1A6A-4969-8DAB-D7A3809F0E62",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r001:*:*:*:*:*:*:*",
"matchCriteriaId": "A5EDA0DE-CD28-44C6-A344-2624B6B95EE5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r002:*:*:*:*:*:*:*",
"matchCriteriaId": "2B87B3AE-A55D-4E2E-A359-1BCE1D583C88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r003c00:*:*:*:*:*:*:*",
"matchCriteriaId": "5CC2E1BB-AB5D-49A7-9101-C238401116CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r003c10:*:*:*:*:*:*:*",
"matchCriteriaId": "5F443AF8-6C00-4C21-923A-11B78A0C94C2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_6800_v3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5979203E-846D-4330-9BBA-B532FF868A0B",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r001:*:*:*:*:*:*:*",
"matchCriteriaId": "22308D2F-E960-4C2A-AAE7-02733EDFAD8E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r002:*:*:*:*:*:*:*",
"matchCriteriaId": "07A8F32F-27D3-4284-9755-5FCFDBF15F16",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r003c00:*:*:*:*:*:*:*",
"matchCriteriaId": "C9E17F3E-EB34-4B71-8A4E-16EE5C2D0D53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r003c10:*:*:*:*:*:*:*",
"matchCriteriaId": "0FDE3533-8677-4D26-8807-FD595940FA1F",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_18500_v3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E08AD0D0-1148-461B-995A-19B5D1E25FB9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r001:*:*:*:*:*:*:*",
"matchCriteriaId": "1C90A369-3FC4-4D17-B58A-D7082908280E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r002:*:*:*:*:*:*:*",
"matchCriteriaId": "1498CC21-1D0B-4B80-921E-FCEFDFC65D77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r003c00:*:*:*:*:*:*:*",
"matchCriteriaId": "23AE40F2-ABA8-426A-B340-5FDF771EF2D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r003c10:*:*:*:*:*:*:*",
"matchCriteriaId": "167DD8BC-BE72-41FD-8CE2-B0652CCB8956",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_18500f:v3:*:*:*:*:*:*:*",
"matchCriteriaId": "6B69A0C5-E8A7-41AD-A8E6-6C020B9FF1D7",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r001:*:*:*:*:*:*:*",
"matchCriteriaId": "A1058EEB-2476-4DA5-8E61-BC485C4F2653",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r002:*:*:*:*:*:*:*",
"matchCriteriaId": "81BA8FEE-F621-491F-BBDD-08517161A275",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r003c00:*:*:*:*:*:*:*",
"matchCriteriaId": "37A15B50-C144-4521-8305-1631B6476946",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r003c10:*:*:*:*:*:*:*",
"matchCriteriaId": "5525BE31-5CF9-4A82-B56A-6F451C969883",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_18800_v3:-:*:*:*:*:*:*:*",
"matchCriteriaId": "9FB8C198-260E-49B6-93D1-68348E46AB73",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r001:*:*:*:*:*:*:*",
"matchCriteriaId": "AA8653A7-097B-4388-AA95-2CE0B17B6FD7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r002:*:*:*:*:*:*:*",
"matchCriteriaId": "0A8344D6-D8EB-43CD-9873-B80D9015B17B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r003c00:*:*:*:*:*:*:*",
"matchCriteriaId": "879612A5-6BAF-4380-BF0F-0C96B206655F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r003c10:*:*:*:*:*:*:*",
"matchCriteriaId": "0227E00A-A341-4F80-B094-79EEA2233715",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_18800f:v3:*:*:*:*:*:*:*",
"matchCriteriaId": "E5B5734C-B217-47C3-B24C-C6ECAC7D9280",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_9000_firmware:v100r001c01:*:*:*:*:*:*:*",
"matchCriteriaId": "AE0E2CA4-0CFE-4419-906D-8F06FD0A5F29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_9000_firmware:v100r001c30:*:*:*:*:*:*:*",
"matchCriteriaId": "8619C1F6-47E8-4BA7-8F08-70F6CB6CDFDF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_9000_firmware:v300r005c00:*:*:*:*:*:*:*",
"matchCriteriaId": "06D302DD-5FB8-47FB-898C-6566B658C3C9",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_9000:-:*:*:*:*:*:*:*",
"matchCriteriaId": "AEC54023-CF84-4095-A3E8-2D6E334768E9",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c09spc505:*:*:*:*:*:*:*",
"matchCriteriaId": "0C30B711-E722-4649-A31E-E75B74A5066A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c91spc205:*:*:*:*:*:*:*",
"matchCriteriaId": "7DEF239C-43A6-4848-A4AF-38A2F9206327",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c91spc900:*:*:*:*:*:*:*",
"matchCriteriaId": "3FE7B7A2-3688-4F8F-9EE5-0069AE57892A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c91spc901:*:*:*:*:*:*:*",
"matchCriteriaId": "DDDEB712-4372-403E-B4DC-C8CBC311EA7A",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_n8500:-:*:*:*:*:*:*:*",
"matchCriteriaId": "B8F94E39-AA55-43AB-80D3-9CE5049FCC25",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:oceanstor_onebox_firmware:v100r003c10:*:*:*:*:*:*:*",
"matchCriteriaId": "80BFBC35-6E8B-4A07-AC68-2DBD102360BF",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:oceanstor_onebox:-:*:*:*:*:*:*:*",
"matchCriteriaId": "D756F23D-F3B3-4FB2-B1BD-62B7BE4CB41A",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
"matchCriteriaId": "88AEB19C-54F6-4D42-8643-1BCD9E59178F",
"versionEndExcluding": "2.3.20.3",
"versionStartIncluding": "2.3.20",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
"matchCriteriaId": "62A986B3-0C56-4350-BEE5-8B694AB87506",
"versionEndExcluding": "2.3.24.3",
"versionStartIncluding": "2.3.21",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C0F91F84-CB4D-4E1C-BF77-2B7189F00957",
"versionEndExcluding": "2.3.28.1",
"versionStartIncluding": "2.3.25",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:flexcube_private_banking:2.0.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "ADEA6A93-BD78-47DC-B3C3-6D27239C6647",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0CCECB33-4CA3-4519-A733-3529B70AB9BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "6715C8EF-DAC6-487F-89F4-52713BB7F663",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "11CCF1EE-70D3-40C9-9797-AE6228DA8522",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:flexcube_private_banking:12.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "50FF641E-E2E8-4641-B7BC-FF862B39EDB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "1B74B912-152D-4F38-9FC1-741D6D0B27FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "78933DD0-F774-4E60-BC66-D5A57919717A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.5.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8ECA7A7E-8177-4FD4-B9B9-F4B1B6F43F98",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.6.0:*:*:*:*:*:*:*",
"matchCriteriaId": "73C9A2AD-F384-44D5-AB33-86B7250760A5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EEB4EB87-5ABB-437D-BDAC-FB64F33929FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "FA3F5761-E2A0-4F67-BAE1-503877676BF3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C1E3C86B-4483-430A-856D-7EAB7D388D2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:oracle:siebel_e-billing:7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FB16FA05-8486-4E04-9745-0EE28458FDA0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions."
},
{
"lang": "es",
"value": "Apache Struts versiones 2.3.19 hasta 2.3.20.2, versiones 2.3.21 hasta 2.3.24.1 y versiones 2.3.25 hasta 2.3.28, cuando Dynamic Method Invocation est\u00e1 habilitado, permite a atacantes remotos ejecutar c\u00f3digo arbitrario por medio del prefijo method:, relacionado con expresiones encadenadas."
}
],
"id": "CVE-2016-3081",
"lastModified": "2026-10-09T14:43:05.703",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2016-3081",
"options": [
{
"exploitation": "active"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-08T00:00:00+00:00",
"version": "2.0.3"
}
}
]
},
"published": "2016-04-26T14:59:02.207",
"references": [
{
"source": "secalert@redhat.com",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory",
"Broken Link"
],
"url": "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/87327"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/91787"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1035665"
},
{
"source": "secalert@redhat.com",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://struts.apache.org/docs/s2-032.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.exploit-db.com/exploits/39756/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "http://packetstormsecurity.com/files/136856/Apache-Struts-2.3.28-Dynamic-Method-Invocation-Remote-Code-Execution.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Third Party Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"Broken Link"
],
"url": "http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/87327"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/91787"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1035665"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "https://struts.apache.org/docs/s2-032.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "https://www.exploit-db.com/exploits/39756/"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3081"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-77"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-77"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…