[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5-yIoVA_fVxh8ur55A-8s1cb-m5M-gEJ9FiMYsL2smI":3,"g5a-risk:CVE-2018-11776":292},{"success":4,"data":5,"meta":290},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":25,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":82,"references":83,"referencesCount":202,"weaknesses":203,"weaknessesCount":207,"isActivelyExploited":4,"cisaInfo":208,"otxData":25,"relatedBlogPosts":209,"seoMetadata":210,"configurations":235,"relatedVendorCves":288,"notableEvents":289},"CVE-2018-11776","What is CVE-2018-11776?","Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.","Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a...","2018-08-22T13:29:00.753","2025-10-27T17:38:06.077",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[],[34],{"Source":17,"Type":18,"CVSSData":35,"BaseSeverity":22,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":44,"ObtainAllPrivilege":44,"ObtainUserPrivilege":44,"ObtainOtherPrivilege":44,"UserInteractionRequired":44},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":38,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":41,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",9.3,"",8.6,10,false,0.99991,[45,45,45,45,45,45,45],"High",[49,54,58,62,65,68,72,76,79],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"apache","struts","*","cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":52,"criteria":57,"vulnerable":4},"netapp","active_iq_unified_manager","cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",{"vendor":55,"product":59,"version":60,"criteria":61,"vulnerable":4},"oncommand_insight","-","cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",{"vendor":55,"product":63,"version":60,"criteria":64,"vulnerable":4},"oncommand_workflow_automation","cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",{"vendor":55,"product":66,"version":60,"criteria":67,"vulnerable":4},"snapcenter","cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",{"vendor":69,"product":70,"version":52,"criteria":71,"vulnerable":4},"oracle","communications_policy_management","cpe:2.3:a:oracle:communications_policy_management:*:*:*:*:*:*:*:*",{"vendor":69,"product":73,"version":74,"criteria":75,"vulnerable":4},"enterprise_manager_base_platform","13.3.0.0","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*",{"vendor":69,"product":73,"version":77,"criteria":78,"vulnerable":4},"13.4.0.0","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*",{"vendor":69,"product":80,"version":52,"criteria":81,"vulnerable":4},"mysql_enterprise_monitor","cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",9,[84,90,96,101,104,108,112,115,120,125,129,132,136,140,143,147,150,153,156,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197],{"url":85,"source":86,"tags":87},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F172830\u002FApache-Struts-Remote-Code-Execution.html","Packetstormsecurity",[88,89],"Third Party Advisory","VDB Entry",{"url":91,"source":92,"tags":93},"http:\u002F\u002Fwww.arubanetworks.com\u002Fassets\u002Falert\u002FARUBA-PSA-2018-005.txt","Arubanetworks",[94,95,88],"Broken Link","Mailing List",{"url":97,"source":98,"tags":99},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Falert-cve-2018-11776-5072787.html","Oracle",[100,88],"Patch",{"url":102,"source":98,"tags":103},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuoct2018-4428296.html",[100,88],{"url":105,"source":106,"tags":107},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105125","Securityfocus",[94,88,89],{"url":109,"source":110,"tags":111},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041547","Securitytracker",[94,88,89],{"url":113,"source":110,"tags":114},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041888",[94,88,89],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fcwiki.apache.org\u002Fconfluence\u002Fdisplay\u002FWW\u002FS2-057","Apache",[119,88],"Issue Tracking",{"url":121,"source":122,"tags":123},"https:\u002F\u002Fgithub.com\u002Fhook-s3c\u002FCVE-2018-11776-Python-PoC","GitHub",[124,88],"Exploit",{"url":126,"source":127,"tags":128},"https:\u002F\u002Flgtm.com\u002Fblog\u002Fapache_struts_CVE-2018-11776","Lgtm",[124,88],{"url":130,"source":117,"tags":131},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E",[95],{"url":133,"source":134,"tags":135},"https:\u002F\u002Fpsirt.global.sonicwall.com\u002Fvuln-detail\u002FSNWLID-2018-0012","Sonicwall",[88],{"url":137,"source":138,"tags":139},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20180822-0001\u002F","Netapp",[88],{"url":141,"source":138,"tags":142},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20181018-0002\u002F",[88],{"url":144,"source":145,"tags":146},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45260\u002F","Exploit-db",[124,88,89],{"url":148,"source":145,"tags":149},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45262\u002F",[124,88,89],{"url":151,"source":145,"tags":152},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45367\u002F",[124,88,89],{"url":154,"source":98,"tags":155},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2020.html",[88],{"url":157,"source":98,"tags":158},"https:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujan2019-5072801.html",[100,88],{"url":85,"source":86,"tags":160},[88,89],{"url":91,"source":92,"tags":162},[94,95,88],{"url":97,"source":98,"tags":164},[100,88],{"url":102,"source":98,"tags":166},[100,88],{"url":105,"source":106,"tags":168},[94,88,89],{"url":109,"source":110,"tags":170},[94,88,89],{"url":113,"source":110,"tags":172},[94,88,89],{"url":116,"source":117,"tags":174},[119,88],{"url":121,"source":122,"tags":176},[124,88],{"url":126,"source":127,"tags":178},[124,88],{"url":130,"source":117,"tags":180},[95],{"url":133,"source":134,"tags":182},[88],{"url":137,"source":138,"tags":184},[88],{"url":141,"source":138,"tags":186},[88],{"url":144,"source":145,"tags":188},[124,88,89],{"url":148,"source":145,"tags":190},[124,88,89],{"url":151,"source":145,"tags":192},[124,88,89],{"url":154,"source":98,"tags":194},[88],{"url":157,"source":98,"tags":196},[100,88],{"url":198,"source":199,"tags":200},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2018-11776","CISA",[201],"US Government Resource",39,[204],{"id":205,"name":205,"description":206},"Unknown","NVD-CWE-noinfo",1,{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":25},[],{"title":211,"metaDescription":212,"keywords":213,"canonicalUrl":214,"structuredData":215},"What is CVE-2018-11776? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-11776, a high severity cyber security vulnerability from 2018. High exploit probability (100.0%). Apache Struts versions 2...","CVE-2018-11776, CVE-2018-11776 vulnerability, CVE-2018-11776 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, apache security, netapp security, oracle security, struts vulnerability, active_iq_unified_manager vulnerability, oncommand_insight vulnerability, oncommand_workflow_automation vulnerability, snapcenter vulnerability","\u002Fwhat-is\u002Fcve-2018-11776",{"@context":216,"@type":217,"headline":211,"description":212,"datePublished":10,"dateModified":11,"author":218,"publisher":222,"about":226,"mainEntityOfPage":230,"articleSection":233,"keywords":234},"https:\u002F\u002Fschema.org","TechArticle",{"@type":219,"name":220,"url":221},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":219,"name":220,"url":221,"logo":223},{"@type":224,"url":225},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":227,"name":6,"description":228,"additionalType":229},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":231,"@id":232},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-11776","Cybersecurity","CVE-2018-11776, CVE-2018-11776 vulnerability, CVE-2018-11776 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[236,249,266],{"Operator":25,"Negate":25,"Nodes":237},[238],{"Operator":239,"Negate":44,"CPEMatch":240},"OR",[241,245],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":242,"VersionStartExcluding":25,"VersionStartIncluding":243,"VersionEndExcluding":244,"VersionEndIncluding":25},"688F84A7-B698-4343-9F7B-FD68B2218035","2.0.4","2.3.35",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":246,"VersionStartExcluding":25,"VersionStartIncluding":247,"VersionEndExcluding":248,"VersionEndIncluding":25},"0D66D46C-389B-4C37-9EEE-6301774719FA","2.5.0","2.5.17",{"Operator":25,"Negate":25,"Nodes":250},[251],{"Operator":239,"Negate":44,"CPEMatch":252},[253,256,260,262,264],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":254,"VersionStartExcluding":25,"VersionStartIncluding":255,"VersionEndExcluding":25,"VersionEndIncluding":25},"BD075607-09B7-493E-8611-66D041FFDA62","7.3",{"Vulnerable":4,"Criteria":257,"MatchCriteriaID":258,"VersionStartExcluding":25,"VersionStartIncluding":259,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*","0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB","9.5",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":261,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F1BE6C1F-2565-4E97-92AA-16563E5660A5",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":263,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5735E553-9731-4AAC-BCFF-989377F817B3",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":265,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94",{"Operator":25,"Negate":25,"Nodes":267},[268],{"Operator":239,"Negate":44,"CPEMatch":269},[270,273,275,277,280,284],{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":271,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":272,"VersionEndIncluding":25},"0E8AF73E-8AC6-4F65-A6F0-DBB2CC7A613F","12.5.0",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":274,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"7582B307-3899-4BBB-B868-BC912A4D0109",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":276,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":278,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":279},"8A94B32D-6B5F-4E42-8345-4F9126A89435","3.4.9.4237",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":281,"VersionStartExcluding":25,"VersionStartIncluding":282,"VersionEndExcluding":25,"VersionEndIncluding":283},"EF71D94F-EFC5-4390-A380-AC0E5DB05516","4.0.0","4.0.6.5281",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":285,"VersionStartExcluding":25,"VersionStartIncluding":286,"VersionEndExcluding":25,"VersionEndIncluding":287},"33EFAF19-A639-47AD-9CDC-D174C91F0F00","8.0.0","8.0.2.8191",[],[],{"lastModified":11,"cacheTime":291,"version":36},1792264654598,{"score":293,"band":47,"action":294,"scoredAt":295},79,"Emergency patch","2026-10-16T06:44:43.054916+00:00"]