CVE:CVE-2020-17530
CNNVD:CNNVD-202012-449
Apache Struts是美国阿帕奇（Apache）基金会的一个开源项目，是一套用于创建企业级Java Web应用的开源MVC框架，主要提供两个版本框架产品，Struts 1和Struts 2。
Struts 存在代码注入漏洞，攻击者可利用该漏洞可以通过强迫Struts的OGNL评估来使用漏洞来运行代码。
solution:Upgrade apache struts to a higher version than 2.5.30,and avoid the version [2.0.0,2.5.30); Upgrade oracle business_intelligence to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_diameter_intelligence_hub to a higher version than 8.0.0,8.1.0,8.2.0,8.2.3,and avoid the version 8.0.0,8.1.0,8.2.0,8.2.3; Upgrade oracle communications_policy_management to a higher version than 12.5.0,and avoid the version 12.5.0; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.3.0,and avoid the version 12.0.0.3.0; Upgrade oracle financial_services_data_integration_hub to a higher version than 8.0.3,8.0.6,and avoid the version 8.0.3,8.0.6; Upgrade oracle hospitality_opera_5 to a higher version than 5.6,and avoid the version 5.6; Upgrade oracle mysql_enterprise_monitor to a higher version than 8.0.23,and avoid the version 8.0.23