Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
References
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
Configuration 8 (hide)
| AND |
|
Configuration 9 (hide)
| AND |
|
Configuration 10 (hide)
| AND |
|
Configuration 11 (hide)
| AND |
|
Configuration 12 (hide)
| AND |
|
Configuration 13 (hide)
| AND |
|
Configuration 14 (hide)
| AND |
|
Configuration 15 (hide)
| AND |
|
Configuration 16 (hide)
|
Configuration 17 (hide)
|
History
09 Oct 2026, 14:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160527-01-struts2-en - Third Party Advisory | |
| References | () http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - Third Party Advisory | |
| References | () http://www.rapid7.com/db/modules/exploit/linux/http/struts_dmi_exec - Third Party Advisory, Broken Link | |
| References | () http://www.rapid7.com/db/modules/exploit/multi/http/struts_dmi_exec - Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/87327 - Third Party Advisory, VDB Entry | |
| References | () https://www.exploit-db.com/exploits/39756/ - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-3081 - US Government Resource | |
| First Time |
Huawei oceanstor 5500 V3
Huawei Huawei oceanstor 5800 V3 Firmware Huawei oceanstor 5300 V3 Oracle flexcube Private Banking Huawei oceanstor 9000 Firmware Huawei oceanstor 5500 V3 Firmware Huawei firehunter6000 Firmware Huawei oceanstor 18800f Huawei oceanstor 18800 V3 Huawei logcenter Huawei oceanstor 5600 V3 Firmware Huawei oceanstor N8500 Firmware Huawei oceanstor Onebox Huawei oceanstor 18800f Firmware Huawei oceanstor 18800 V3 Firmware Huawei oceanstor 18500 V3 Firmware Huawei agile Controller-campus Firmware Huawei firehunter6000 Huawei oceanstor 5600 V3 Huawei oceanstor 6800 V3 Huawei oceanstor 9000 Huawei anyoffice Huawei oceanstor 5300 V3 Firmware Huawei oceanstor N8500 Huawei oceanstor 6800 V3 Firmware Huawei oceanstor Onebox Firmware Oracle micros Retail Xbri Loss Prevention Huawei agile Controller-campus Huawei oceanstor 18500 V3 Huawei oceanstor 5800 V3 Huawei oceanstor 18500f Huawei oceanstor 18500f Firmware |
|
| CPE | cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.1.8:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.2.3.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.2.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.2.1.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.1.6:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.13:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.1.3:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.4.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.1.4:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.1.2:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.1.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.4:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.1.5:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.14:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.12:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.1.0:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.2.3:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.3:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.0.10:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.1.2:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.1.8.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:* |
cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r003c10:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_6800_v3:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r003c10:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_5800_v3:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r002:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r003c00:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_5600_v3:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r001:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_private_banking:12.0.1:*:*:*:*:*:*:* cpe:2.3:a:huawei:anyoffice:v200r005c00:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r001:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r003c10:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_9000_firmware:v100r001c01:*:*:*:*:*:*:* cpe:2.3:a:huawei:logcenter:v100r001c20:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r003c10:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c91spc900:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_private_banking:2.2.0:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r001:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r002:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_9000_firmware:v300r005c00:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_private_banking:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:huawei:anyoffice:v200r006c00:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_5500_v3:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r003c10:*:*:*:*:*:*:* cpe:2.3:o:huawei:firehunter6000_firmware:v100r001c20:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r002:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r003c00:*:*:*:*:*:*:* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.0.1:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r001:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r002:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_18500f:v3:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c09spc505:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_n8500:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r002:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r001:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_private_banking:2.0.0.0:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_5300_v3:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_private_banking:12.0.3:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r002:*:*:*:*:*:*:* cpe:2.3:h:huawei:firehunter6000:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c91spc205:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r003c00:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_onebox_firmware:v100r003c10:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r001:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r003c00:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_18800_v3:-:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_18800f:v3:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_9000:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c00:*:*:*:*:*:*:* cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r003c10:*:*:*:*:*:*:* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.1:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_9000_firmware:v100r001c30:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r003c00:*:*:*:*:*:*:* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.6.0:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r003c10:*:*:*:*:*:*:* cpe:2.3:h:huawei:agile_controller-campus:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.8.0:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r003c00:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r003c00:*:*:*:*:*:*:* cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.7.0:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r003c00:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r001:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r002:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_18500_v3:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r002:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r002:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r003c10:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r001:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r001:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r003c00:*:*:*:*:*:*:* cpe:2.3:a:oracle:micros_retail_xbri_loss_prevention:10.5.0:*:*:*:*:*:*:* cpe:2.3:a:huawei:logcenter:v100r001c10:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_n8500_firmware:v200r001c91spc901:*:*:*:*:*:*:* cpe:2.3:h:huawei:oceanstor_onebox:-:*:*:*:*:*:*:* cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r003c10:*:*:*:*:*:*:* |
08 Oct 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2016-04-26 14:59
Updated : 2026-10-09 14:43
NVD link : CVE-2016-3081
Mitre link : CVE-2016-3081
CVE.ORG link : CVE-2016-3081
JSON object : View
Products Affected
huawei
- oceanstor_5500_v3_firmware
- oceanstor_18800f
- oceanstor_18800_v3
- oceanstor_5300_v3
- oceanstor_onebox
- oceanstor_18500_v3_firmware
- oceanstor_18500f
- agile_controller-campus_firmware
- firehunter6000
- oceanstor_5600_v3_firmware
- oceanstor_5600_v3
- oceanstor_onebox_firmware
- oceanstor_5300_v3_firmware
- oceanstor_n8500
- firehunter6000_firmware
- oceanstor_n8500_firmware
- oceanstor_5500_v3
- oceanstor_5800_v3
- logcenter
- oceanstor_6800_v3_firmware
- agile_controller-campus
- oceanstor_18500_v3
- oceanstor_18500f_firmware
- oceanstor_9000_firmware
- oceanstor_18800_v3_firmware
- oceanstor_6800_v3
- oceanstor_18800f_firmware
- oceanstor_9000
- anyoffice
- oceanstor_5800_v3_firmware
apache
- struts
oracle
- flexcube_private_banking
- micros_retail_xbri_loss_prevention
- siebel_e-billing
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
