Skip to content
COOEY

EXPOSURES › CVE-2006-1547

CVE-2006-1547

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-01-21 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2006-1547 ↗
⌖ EXPLOITED IN THE WILD SHAME 65/100 exploited-in-wildunpatched

Apache Struts 1 ActionForm DoS vulnerability exploited in the wild before patching.

Apache Struts 1 ActionForm contained a denial-of-service vulnerability in versions before 1.2.9 with BeanUtils 1.7, allowing attackers to disrupt services. DIB organizations must ensure legacy frameworks are patched or replaced, as unpatched CVEs remain actively exploited in the wild. This failure highlights the risk of relying on outdated software without a patching strategy.

Shame score — The vulnerability was actively exploited in the wild (KEV) and remained unpatched for years, demonstrating negligence in maintaining legacy systems.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
apache · vendorStruts 1 · product
DESCRIPTION

ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS).

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
Apache Struts 1 DoS vulnerability (CVE-2006-1547) is a known historical flaw in legacy software, but the provided sources lack any security press or authority commentary on the vendor's response, focu
cooey ↗ severe-fallout -0.60
Neutral database entry; no commentary on vendor response.
"ActionForm in Apache Struts versions before 1.2.9 with BeanUtils 1.7 contains a vulnerability that allows for denial-of-service (DoS)."
app.opencve.io ↗ severe-fallout +0.00
Irrelevant; focuses on unrelated Apache Allura CVEs.
"CVE-2026-80180 1 Apache 1 Allura 2026-09-04 6.1 Medium Stored XSS via markdown HTML processing in Apache Allura."
www.malwarebytes.com ↗ severe-fallout +0.00
Irrelevant; focuses on unrelated Chrome vulnerabilities.
"Two critical Chrome flaws put users at risk on malicious websites"
www.cvefind.com ↗ severe-fallout +0.00
Irrelevant; generic CVE database page.
"CVE, short for Common Vulnerabilities and Exposures, is a list of publicly disclosed computer security flaws."
opencve.alliance.unm.edu ↗ severe-fallout +0.00
Irrelevant; focuses on unrelated CVEs.
"CVE-2026-86161 1 Sourcecodester 1 Online Voting System 2026-09-06 7.3 High A vulnerability was found in SourceCodester Online Voting System 1.0."
cybersecuritynews.com ↗ severe-fallout +0.00
Irrelevant; focuses on unrelated Chrome vulnerabilities.
"Critical Chrome 0-Day Vulnerability Actively Exploited in the Wild"
xposedornot.com ↗ severe-fallout +0.00
Irrelevant; focuses on unrelated data breaches.
"Data Breach Directory & Database: Browse 780+ Known Breaches - XposedOrNot"
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.