[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5-yIoVA_fVxh8ur55A-8s1cb-m5M-gEJ9FiMYsL2smI":3,"g5a-risk:CVE-2018-11776":294},{"success":4,"data":5,"meta":292},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":25,"epssTimeSeries":46,"severity":49,"affectedProducts":50,"affectedProductsCount":84,"references":85,"referencesCount":204,"weaknesses":205,"weaknessesCount":209,"isActivelyExploited":4,"cisaInfo":210,"otxData":25,"relatedBlogPosts":211,"seoMetadata":212,"configurations":237,"relatedVendorCves":290,"notableEvents":291},"CVE-2018-11776","What is CVE-2018-11776?","Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.","Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a...","2018-08-22T13:29:00.753","2025-10-27T17:38:06.077",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[],[34],{"Source":17,"Type":18,"CVSSData":35,"BaseSeverity":22,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":44,"ObtainAllPrivilege":44,"ObtainUserPrivilege":44,"ObtainOtherPrivilege":44,"UserInteractionRequired":44},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":38,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":41,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",9.3,"",8.6,10,false,0.99996,[47,47,47,47,48,48,45],0.99994,0.99995,"High",[51,56,60,64,67,70,74,78,81],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"apache","struts","*","cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":54,"criteria":59,"vulnerable":4},"netapp","active_iq_unified_manager","cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",{"vendor":57,"product":61,"version":62,"criteria":63,"vulnerable":4},"oncommand_insight","-","cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",{"vendor":57,"product":65,"version":62,"criteria":66,"vulnerable":4},"oncommand_workflow_automation","cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",{"vendor":57,"product":68,"version":62,"criteria":69,"vulnerable":4},"snapcenter","cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":54,"criteria":73,"vulnerable":4},"oracle","communications_policy_management","cpe:2.3:a:oracle:communications_policy_management:*:*:*:*:*:*:*:*",{"vendor":71,"product":75,"version":76,"criteria":77,"vulnerable":4},"enterprise_manager_base_platform","13.3.0.0","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*",{"vendor":71,"product":75,"version":79,"criteria":80,"vulnerable":4},"13.4.0.0","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*",{"vendor":71,"product":82,"version":54,"criteria":83,"vulnerable":4},"mysql_enterprise_monitor","cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",9,[86,92,98,103,106,110,114,117,122,127,131,134,138,142,145,149,152,155,158,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197,199],{"url":87,"source":88,"tags":89},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F172830\u002FApache-Struts-Remote-Code-Execution.html","Packetstormsecurity",[90,91],"Third Party Advisory","VDB Entry",{"url":93,"source":94,"tags":95},"http:\u002F\u002Fwww.arubanetworks.com\u002Fassets\u002Falert\u002FARUBA-PSA-2018-005.txt","Arubanetworks",[96,97,90],"Broken Link","Mailing List",{"url":99,"source":100,"tags":101},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Falert-cve-2018-11776-5072787.html","Oracle",[102,90],"Patch",{"url":104,"source":100,"tags":105},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuoct2018-4428296.html",[102,90],{"url":107,"source":108,"tags":109},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105125","Securityfocus",[96,90,91],{"url":111,"source":112,"tags":113},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041547","Securitytracker",[96,90,91],{"url":115,"source":112,"tags":116},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041888",[96,90,91],{"url":118,"source":119,"tags":120},"https:\u002F\u002Fcwiki.apache.org\u002Fconfluence\u002Fdisplay\u002FWW\u002FS2-057","Apache",[121,90],"Issue Tracking",{"url":123,"source":124,"tags":125},"https:\u002F\u002Fgithub.com\u002Fhook-s3c\u002FCVE-2018-11776-Python-PoC","GitHub",[126,90],"Exploit",{"url":128,"source":129,"tags":130},"https:\u002F\u002Flgtm.com\u002Fblog\u002Fapache_struts_CVE-2018-11776","Lgtm",[126,90],{"url":132,"source":119,"tags":133},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E",[97],{"url":135,"source":136,"tags":137},"https:\u002F\u002Fpsirt.global.sonicwall.com\u002Fvuln-detail\u002FSNWLID-2018-0012","Sonicwall",[90],{"url":139,"source":140,"tags":141},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20180822-0001\u002F","Netapp",[90],{"url":143,"source":140,"tags":144},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20181018-0002\u002F",[90],{"url":146,"source":147,"tags":148},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45260\u002F","Exploit-db",[126,90,91],{"url":150,"source":147,"tags":151},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45262\u002F",[126,90,91],{"url":153,"source":147,"tags":154},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45367\u002F",[126,90,91],{"url":156,"source":100,"tags":157},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2020.html",[90],{"url":159,"source":100,"tags":160},"https:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujan2019-5072801.html",[102,90],{"url":87,"source":88,"tags":162},[90,91],{"url":93,"source":94,"tags":164},[96,97,90],{"url":99,"source":100,"tags":166},[102,90],{"url":104,"source":100,"tags":168},[102,90],{"url":107,"source":108,"tags":170},[96,90,91],{"url":111,"source":112,"tags":172},[96,90,91],{"url":115,"source":112,"tags":174},[96,90,91],{"url":118,"source":119,"tags":176},[121,90],{"url":123,"source":124,"tags":178},[126,90],{"url":128,"source":129,"tags":180},[126,90],{"url":132,"source":119,"tags":182},[97],{"url":135,"source":136,"tags":184},[90],{"url":139,"source":140,"tags":186},[90],{"url":143,"source":140,"tags":188},[90],{"url":146,"source":147,"tags":190},[126,90,91],{"url":150,"source":147,"tags":192},[126,90,91],{"url":153,"source":147,"tags":194},[126,90,91],{"url":156,"source":100,"tags":196},[90],{"url":159,"source":100,"tags":198},[102,90],{"url":200,"source":201,"tags":202},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2018-11776","CISA",[203],"US Government Resource",39,[206],{"id":207,"name":207,"description":208},"Unknown","NVD-CWE-noinfo",1,{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":25},[],{"title":213,"metaDescription":214,"keywords":215,"canonicalUrl":216,"structuredData":217},"What is CVE-2018-11776? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2018-11776, a high severity cyber security vulnerability from 2018. High exploit probability (100.0%). Apache Struts versions 2...","CVE-2018-11776, CVE-2018-11776 vulnerability, CVE-2018-11776 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, apache security, netapp security, oracle security, struts vulnerability, active_iq_unified_manager vulnerability, oncommand_insight vulnerability, oncommand_workflow_automation vulnerability, snapcenter vulnerability","\u002Fwhat-is\u002Fcve-2018-11776",{"@context":218,"@type":219,"headline":213,"description":214,"datePublished":10,"dateModified":11,"author":220,"publisher":224,"about":228,"mainEntityOfPage":232,"articleSection":235,"keywords":236},"https:\u002F\u002Fschema.org","TechArticle",{"@type":221,"name":222,"url":223},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":221,"name":222,"url":223,"logo":225},{"@type":226,"url":227},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":229,"name":6,"description":230,"additionalType":231},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":233,"@id":234},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2018-11776","Cybersecurity","CVE-2018-11776, CVE-2018-11776 vulnerability, CVE-2018-11776 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[238,251,268],{"Operator":25,"Negate":25,"Nodes":239},[240],{"Operator":241,"Negate":44,"CPEMatch":242},"OR",[243,247],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":244,"VersionStartExcluding":25,"VersionStartIncluding":245,"VersionEndExcluding":246,"VersionEndIncluding":25},"688F84A7-B698-4343-9F7B-FD68B2218035","2.0.4","2.3.35",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":248,"VersionStartExcluding":25,"VersionStartIncluding":249,"VersionEndExcluding":250,"VersionEndIncluding":25},"0D66D46C-389B-4C37-9EEE-6301774719FA","2.5.0","2.5.17",{"Operator":25,"Negate":25,"Nodes":252},[253],{"Operator":241,"Negate":44,"CPEMatch":254},[255,258,262,264,266],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":256,"VersionStartExcluding":25,"VersionStartIncluding":257,"VersionEndExcluding":25,"VersionEndIncluding":25},"BD075607-09B7-493E-8611-66D041FFDA62","7.3",{"Vulnerable":4,"Criteria":259,"MatchCriteriaID":260,"VersionStartExcluding":25,"VersionStartIncluding":261,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*","0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB","9.5",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":263,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F1BE6C1F-2565-4E97-92AA-16563E5660A5",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":265,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5735E553-9731-4AAC-BCFF-989377F817B3",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":267,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94",{"Operator":25,"Negate":25,"Nodes":269},[270],{"Operator":241,"Negate":44,"CPEMatch":271},[272,275,277,279,282,286],{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":273,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":274,"VersionEndIncluding":25},"0E8AF73E-8AC6-4F65-A6F0-DBB2CC7A613F","12.5.0",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":276,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"7582B307-3899-4BBB-B868-BC912A4D0109",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":278,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":280,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":281},"8A94B32D-6B5F-4E42-8345-4F9126A89435","3.4.9.4237",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":283,"VersionStartExcluding":25,"VersionStartIncluding":284,"VersionEndExcluding":25,"VersionEndIncluding":285},"EF71D94F-EFC5-4390-A380-AC0E5DB05516","4.0.0","4.0.6.5281",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":287,"VersionStartExcluding":25,"VersionStartIncluding":288,"VersionEndExcluding":25,"VersionEndIncluding":289},"33EFAF19-A639-47AD-9CDC-D174C91F0F00","8.0.0","8.0.2.8191",[],[],{"lastModified":11,"cacheTime":293,"version":36},1793196385962,{"score":295,"band":49,"action":296,"scoredAt":297},79,"Emergency patch","2026-10-28T06:44:36.646731+00:00"]