CISA Known Exploited Vulnerability

CVE-2006-1547

Apache · Struts 1

Apache Struts 1 ActionForm Denial-of-Service Vulnerability

Date added 2022-01-21

BOD 22-01 due date 2022-07-21

CWE —

Ransomware Unknown

CISA description

ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS).

Apply updates per vendor instructions.

Vulnerability data triggers these controls during assessment and continuous monitoring.