CVE-2016-3081
At a glance Severity HIGH 8.1 Exploitation Known exploited (CISA KEV) · added 2026-10-08 Exploited per ENISA since 2026-10-08 EPSS EPSS 96.53 % · percentile 100 (2026-10-27) State PUBLISHED Published 2016-04-26 Updated 2026-10-09 Assigner redhat NVD status Analyzed Description Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
Scores Version Score Vector Scored by CVSS 3.1 HIGH 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CISA-ADP CVSS 3.1 HIGH 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 3.1 HIGH 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H NVD · 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary) CVSS 2.0 HIGH 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
Advisories
European references
Affected configurations (NVD CPE) cpe:2.3:o:huawei:agile_controller-campus_firmware:v100r002c00:*:*:*:*:*:*:*cpe:2.3:a:huawei:anyoffice:v200r005c00:*:*:*:*:*:*:*cpe:2.3:a:huawei:anyoffice:v200r006c00:*:*:*:*:*:*:*cpe:2.3:a:huawei:logcenter:v100r001c10:*:*:*:*:*:*:*cpe:2.3:a:huawei:logcenter:v100r001c20:*:*:*:*:*:*:*cpe:2.3:o:huawei:firehunter6000_firmware:v100r001c20:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r001:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r002:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r003c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5300_v3_firmware:v300r003c10:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r001:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r002:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r003c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5500_v3_firmware:v300r003c10:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r001:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r002:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r003c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5600_v3_firmware:v300r003c10:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r001:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r002:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r003c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_5800_v3_firmware:v300r003c10:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r001:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r002:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r003c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_6800_v3_firmware:v300r003c10:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r001:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r002:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r003c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18500_v3_firmware:v300r003c10:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r001:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r002:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r003c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18500f_firmware:v300r003c10:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r001:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r002:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r003c00:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18800_v3_firmware:v300r003c10:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r001:*:*:*:*:*:*:*cpe:2.3:o:huawei:oceanstor_18800f_firmware:v300r002:*:*:*:*:*:*:*+26 more Affected products Product Versions affected n/a
References
Sources
