VULNERABILITY INTELLIGENCE

CVE-2012-4387

CVSS score5 MEDIUM

EPSS probability8.14%

CISA KEVNot currently listed

Published2012-09-05

Last modified2026-06-16

Description

Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.