Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2017-9791: Apache Struts 1 Improper Input Validation Vulnerability

The Struts 1 plugin in Apache Struts might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
ApacheCVE-2017-9791
Related
CVE-2016-3081: Apache Struts Command Injection Vulnerability Known Exploited Vulnerabilities · Oct 08, 2026
CVE-2026-34197: Apache ActiveMQ Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Apr 16, 2026