CVE:CVE-2017-15707
CNNVD:CNNVD-201710-1019
Apache Struts是美国阿帕奇（Apache）软件基金会负责维护的一个开源项目，是一套用于创建企业级Java Web应用的开源MVC框架。Apache Struts 2是Apache Struts的下一代产品，是在Struts 1和WebWork的技术基础上进行了合并的全新Struts 2框架。
Apache Struts 2.5版本至2.5.14版本中存在安全漏洞。在使用Struts REST插件时，攻击者可通过发送特制的JSON请求利用该漏洞造成拒绝服务。
solution:Upgrade apache struts to a higher version than 2.5.14,and avoid the version [2.5,2.5.14]; Upgrade netapp oncommand_balance to a higher version than -; Upgrade oracle agile_plm_framework to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle enterprise_manager_for_virtualization to a higher version than 13.2.2,13.2.3,and avoid the version 13.2.2,13.2.3; Upgrade oracle financial_services_hedge_management_and_ifrs_valuations to a higher version than 8.0.4,8.0.5,and avoid the version 8.0.4,8.0.5; Upgrade oracle financial_services_market_risk_measurement_and_management to a higher version than 8.0.5,and avoid the version 8.0.5; Upgrade oracle global_lifecycle_management_opatchauto to a higher version than *; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle retail_order_broker to a higher version than 5.2,and avoid the version 5.2; Upgrade oracle retail_xstore_point_of_service to a higher version than 6.5.11,7.0.6,7.1.6,15.0.1,16.0.2,and avoid the version 6.5.11,7.0.6,7.1.6,15.0.1,16.0.2; Upgrade oracle webcenter_portal to a higher version than 12.2.1.2.0,12.2.1.3.0,and avoid the version 12.2.1.2.0,12.2.1.3.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.2,12.2.1.3,and avoid the version 12.2.1.2,12.2.1.3