CVE-2006-1547—Apache Struts 1 ActionForm Denial-of-Service Vulnerability

PUBLISHEDvulnerability record
2022-01-21 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2006-1547
Project:
Apache
Product:
Struts 1
Date Added:
2022-01-21
Due Date:
2022-07-21
Last Updated:
June 21, 2025

Vulnerability Name

Apache Struts 1 ActionForm Denial-of-Service Vulnerability

Description

ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS).

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2006-1547
browse all CVEs