CVE-2016-1181High· 8.1▾ TwilightActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a mul…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 2.5 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
13%
— → 8.1
none → high
ActionServlet.java in Apache Struts 1 1.x through 1.3.10 mishandles multithreaded access to an ActionForm instance, which allows remote attackers to execute arbitrary code or cause a denial of service (unexpected memory access) via a multipart request, a related issue to CVE-2015-0899.
banking_platform = 2.3.0banking_platform = 2.4.0banking_platform = 2.4.1banking_platform = 2.5.0portal = 11.1.1.6struts = 1.0struts = 1.0.1struts = 1.0.2struts = 1.1struts = 1.2.0struts = 1.2.1struts = 1.2.2struts = 1.2.3struts = 1.2.4struts = 1.2.5struts = 1.2.6struts = 1.2.7struts = 1.2.8struts = 1.2.9struts = 1.3.5struts = 1.3.6struts = 1.3.7struts = 1.3.8struts = 1.3.9struts = 1.3.10Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-87289High· 7.5Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content)
CVE-2026-87285Medium· 6.0Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
CVE-2026-87284Low· 3.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
CVE-2026-87283Medium· 6.0Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
CVE-2026-87282Medium· 6.0Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
CVE-2026-87281Low· 3.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)