CVE

CVE-2012-0394

6.8

CVSS

Description

The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrary commands via unspecified vectors. NOTE: the vendor characterizes this behavior as not "a security vulnerability itself.

Attack Vector

Privileges Req.

User Interaction

Updated Sep 18, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2012-0394 Scanner

CVE-2012-0394 scanner - OGNL Injection (Object-Graph Navigation Language) vulnerability in Apache Struts

Used 2.9k times · 5.9k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →