[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5-yIoVA_fVxh8ur55A-8s1cb-m5M-gEJ9FiMYsL2smI":3,"g5a-risk:CVE-2018-11776":292},{"success":4,"data":5,"meta":290},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":45,"epssPercentile":25,"epssTimeSeries":46,"severity":47,"affectedProducts":48,"affectedProductsCount":82,"references":83,"referencesCount":202,"weaknesses":203,"weaknessesCount":207,"isActivelyExploited":4,"cisaInfo":208,"otxData":25,"relatedBlogPosts":209,"seoMetadata":210,"configurations":235,"relatedVendorCves":288,"notableEvents":289},"CVE-2018-11776","What is CVE-2018-11776?","Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.","Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a...","2018-08-22T13:29:00.753","2025-10-27T17:38:06.077",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":32,"CVSSMetricV2":33,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[],[34],{"Source":17,"Type":18,"CVSSData":35,"BaseSeverity":22,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":44,"ObtainAllPrivilege":44,"ObtainUserPrivilege":44,"ObtainOtherPrivilege":44,"UserInteractionRequired":44},{"Version":36,"VectorString":37,"AccessVector":21,"AccessComplexity":38,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":39,"AvailabilityImpact":39,"BaseScore":40,"BaseSeverity":41,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","MEDIUM","COMPLETE",9.3,"",8.6,10,false,0.99993,[45,45,45,45,45,45,45],"High",[49,54,58,62,65,68,72,76,79],{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"apache","struts","*","cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":52,"criteria":57,"vulnerable":4},"netapp","active_iq_unified_manager","cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:windows:*:*",{"vendor":55,"product":59,"version":60,"criteria":61,"vulnerable":4},"oncommand_insight","-","cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",{"vendor":55,"product":63,"version":60,"criteria":64,"vulnerable":4},"oncommand_workflow_automation","cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",{"vendor":55,"product":66,"version":60,"criteria":67,"vulnerable":4},"snapcenter","cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",{"vendor":69,"product":70,"version":52,"criteria":71,"vulnerable":4},"oracle","communications_policy_management","cpe:2.3:a:oracle:communications_policy_management:*:*:*:*:*:*:*:*",{"vendor":69,"product":73,"version":74,"criteria":75,"vulnerable":4},"enterprise_manager_base_platform","13.3.0.0","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*",{"vendor":69,"product":73,"version":77,"criteria":78,"vulnerable":4},"13.4.0.0","cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*",{"vendor":69,"product":80,"version":52,"criteria":81,"vulnerable":4},"mysql_enterprise_monitor","cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",9,[84,90,96,101,104,108,112,115,120,125,129,132,136,140,143,147,150,153,156,159,161,163,165,167,169,171,173,175,177,179,181,183,185,187,189,191,193,195,197],{"url":85,"source":86,"tags":87},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F172830\u002FApache-Struts-Remote-Code-Execution.html","Packetstormsecurity",[88,89],"Third Party Advisory","VDB Entry",{"url":91,"source":92,"tags":93},"http:\u002F\u002Fwww.arubanetworks.com\u002Fassets\u002Falert\u002FARUBA-PSA-2018-005.txt","Arubanetworks",[94,95,88],"Broken Link","Mailing List",{"url":97,"source":98,"tags":99},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Falert-cve-2018-11776-5072787.html","Oracle",[100,88],"Patch",{"url":102,"source":98,"tags":103},"http:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuoct2018-4428296.html",[100,88],{"url":105,"source":106,"tags":107},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105125","Securityfocus",[94,88,89],{"url":109,"source":110,"tags":111},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041547","Securitytracker",[94,88,89],{"url":113,"source":110,"tags":114},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041888",[94,88,89],{"url":116,"source":117,"tags":118},"https:\u002F\u002Fcwiki.apache.org\u002Fconfluence\u002Fdisplay\u002FWW\u002FS2-057","Apache",[119,88],"Issue Tracking",{"url":121,"source":122,"tags":123},"https:\u002F\u002Fgithub.com\u002Fhook-s3c\u002FCVE-2018-11776-Python-PoC","GitHub",[124,88],"Exploit",{"url":126,"source":127,"tags":128},"https:\u002F\u002Flgtm.com\u002Fblog\u002Fapache_struts_CVE-2018-11776","Lgtm",[124,88],{"url":130,"source":117,"tags":131},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E",[95],{"url":133,"source":134,"tags":135},"https:\u002F\u002Fpsirt.global.sonicwall.com\u002Fvuln-detail\u002FSNWLID-2018-0012","Sonicwall",[88],{"url":137,"source":138,"tags":139},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20180822-0001\u002F","Netapp",[88],{"url":141,"source":138,"tags":142},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20181018-0002\u002F",[88],{"url":144,"source":145,"tags":146},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45260\u002F","Exploit-db",[124,88,89],{"url":148,"source":145,"tags":149},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45262\u002F",[124,88,89],{"url":151,"source":145,"tags":152},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F45367\u002F",[124,88,89],{"url":154,"source":98,"tags":155},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2020.html",[88],{"url":157,"source":98,"tags":158},"https:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpujan2019-5072801.html",[100,88],{"url":85,"source":86,"tags":160},[88,89],{"url":91,"source":92,"tags":162},[94,95,88],{"url":97,"source":98,"tags":164},[100,88],{"url":102,"source":98,"tags":166},[100,88],{"url":105,"source":106,"tags":168},[94,88,89],{"url":109,"source":110,"tags":170},[94,88,89],{"url":113,"source":110,"tags":172},[94,88,89],{"url":116,"source":117,"tags":174},[119,88],{"url":121,"source":122,"tags":176},[124,88],{"url":126,"source":127,"tags":178},[124,88],{"url":130,"source":117,"tags":180},[95],{"url":133,"source":134,"tags":182},[88],{"url":137,"source":138,"tags":184},[88],{"url":141,"source":138,"tags":186},[88],{"url":144,"source":145,"tags":188},[124,88,89],{"url":148,"source":145,"tags":190},[124,88,89],{"url":151,"source":145,"tags":192},[124,88,89],{"url":154,"source":98,"tags":194},[88],{"url":157,"source":98,"tags":196},[100,88],{"url":198,"source":199,"tags":200},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2018-11776","CISA",[201],"US Government Resource",39,[204],{"id":205,"name":205,"description":206},"Unknown","NVD-CWE-noinfo",1,{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":25},[],{"title":211,"metaDescription":212,"keywords":213,"canonicalUrl":214,"structuredData":215},"What is CVE-2018-11776? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2018-11776, a high severity cyber security vulnerability from 2018. High exploit probability (100.0%). Apache Struts versions 2...","CVE-2018-11776, CVE-2018-11776 vulnerability, CVE-2018-11776 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, apache security, netapp security, oracle security, struts vulnerability, active_iq_unified_manager vulnerability, oncommand_insight vulnerability, oncommand_workflow_automation vulnerability, snapcenter vulnerability","\u002Fwhat-is\u002Fcve-2018-11776",{"@context":216,"@type":217,"headline":211,"description":212,"datePublished":10,"dateModified":11,"author":218,"publisher":222,"about":226,"mainEntityOfPage":230,"articleSection":233,"keywords":234},"https:\u002F\u002Fschema.org","TechArticle",{"@type":219,"name":220,"url":221},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":219,"name":220,"url":221,"logo":223},{"@type":224,"url":225},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":227,"name":6,"description":228,"additionalType":229},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":231,"@id":232},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2018-11776","Cybersecurity","CVE-2018-11776, CVE-2018-11776 vulnerability, CVE-2018-11776 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[236,249,266],{"Operator":25,"Negate":25,"Nodes":237},[238],{"Operator":239,"Negate":44,"CPEMatch":240},"OR",[241,245],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":242,"VersionStartExcluding":25,"VersionStartIncluding":243,"VersionEndExcluding":244,"VersionEndIncluding":25},"688F84A7-B698-4343-9F7B-FD68B2218035","2.0.4","2.3.35",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":246,"VersionStartExcluding":25,"VersionStartIncluding":247,"VersionEndExcluding":248,"VersionEndIncluding":25},"0D66D46C-389B-4C37-9EEE-6301774719FA","2.5.0","2.5.17",{"Operator":25,"Negate":25,"Nodes":250},[251],{"Operator":239,"Negate":44,"CPEMatch":252},[253,256,260,262,264],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":254,"VersionStartExcluding":25,"VersionStartIncluding":255,"VersionEndExcluding":25,"VersionEndIncluding":25},"BD075607-09B7-493E-8611-66D041FFDA62","7.3",{"Vulnerable":4,"Criteria":257,"MatchCriteriaID":258,"VersionStartExcluding":25,"VersionStartIncluding":259,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:*","0CB28AF5-5AF0-4475-A7B6-12E1795FFDCB","9.5",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":261,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F1BE6C1F-2565-4E97-92AA-16563E5660A5",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":263,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5735E553-9731-4AAC-BCFF-989377F817B3",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":265,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94",{"Operator":25,"Negate":25,"Nodes":267},[268],{"Operator":239,"Negate":44,"CPEMatch":269},[270,273,275,277,280,284],{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":271,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":272,"VersionEndIncluding":25},"0E8AF73E-8AC6-4F65-A6F0-DBB2CC7A613F","12.5.0",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":274,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"7582B307-3899-4BBB-B868-BC912A4D0109",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":276,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":278,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":279},"8A94B32D-6B5F-4E42-8345-4F9126A89435","3.4.9.4237",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":281,"VersionStartExcluding":25,"VersionStartIncluding":282,"VersionEndExcluding":25,"VersionEndIncluding":283},"EF71D94F-EFC5-4390-A380-AC0E5DB05516","4.0.0","4.0.6.5281",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":285,"VersionStartExcluding":25,"VersionStartIncluding":286,"VersionEndExcluding":25,"VersionEndIncluding":287},"33EFAF19-A639-47AD-9CDC-D174C91F0F00","8.0.0","8.0.2.8191",[],[],{"lastModified":11,"cacheTime":291,"version":36},1793195214000,{"score":293,"band":47,"action":294,"scoredAt":295},79,"Emergency patch","2026-07-01T10:22:40.828503+00:00"]