CVE-2016-3090

HIGH · CVSS 8.8 EPSS 5.66%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-10-30 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2016-3090

Severity

HIGH

CVSS

8.8

EPSS

5.66%

Apache

Original Filing — NVD Description

The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling.