[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2006-1547":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":24,"technologies":27,"references":30,"score":43,"epss_score":44,"epss_percentile":45,"is_kev":20,"cisa_kev_date_added":46,"cisa_kev_due_date":47,"cisa_ssvc":48,"attack_mappings":58,"exploits":65},121703,"CVE-2006-1547","EUVD-2022-3054","Improper Input Validation in Apache Struts\n\nActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart\u002Fform-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.","2022-05-01T06:50:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"temporalScore":13,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"remediationLevel":19,"reportConfidence":19,"temporalSeverity":15,"availabilityImpact":15,"privilegesRequired":17,"exploitCodeMaturity":15,"confidentialityImpact":17},"UNCHANGED","3.1",7.5,"NETWORK","HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H\u002FE:H","NONE","LOW","NOT_DEFINED",true,[22,23],"CWE-749","CWE-20",[25,26],"cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*","cpe:2.3:a:apache:commons_beanutils:1.7.0:*:*:*:*:*:*:*",[28,29],"Apache Commons Beanutils","Apache Struts",[31,32,33,34,35,36,37,38,39,40,41,42],"http:\u002F\u002Fissues.apache.org\u002Fbugzilla\u002Fshow_bug.cgi?id=38534","http:\u002F\u002Flists.suse.com\u002Farchive\u002Fsuse-security-announce\u002F2006-May\u002F0004.html","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F19493","http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F20117","http:\u002F\u002Fsecuritytracker.com\u002Fid?1015856","http:\u002F\u002Fstruts.apache.org\u002Fstruts-doc-1.2.9\u002FuserGuide\u002Frelease-notes.html","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F17342","http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2006\u002F1205","https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F25613","https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2006-1547","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2006-1547","https:\u002F\u002Fgithub.com\u002Fapache\u002Fstruts",0.85,0.54635,0.99021,"2022-01-21T00:00:00Z","2022-07-21T00:00:00Z",{"timestamp":49,"automatable":50,"tech_impact":51,"exploitation":52,"cisa_decision":53,"cisa_remediation_timeline":57},"2025-02-07T13:35:54.338056Z","yes","partial","active",{"vector":54,"decision":55,"priority":56},"CISAv1\u002FE:A\u002FA:Y\u002FT:P\u002FM:H\u002F2026-10-25T11:42:36.154248\u002F","act","immediate","3D",[59],{"name":60,"source":61,"tactics":62,"technique_id":64},"Exploit Public-Facing Application","attack_vector",[63],"initial-access","T1190",[66],{"link":36}]