Recent high-profile data breaches resulting from un-patched Apache Struts vulnerabilities show the damage that can come from lack of visibility & control of open source.
Now is the time to make sure your applications aren’t at risk.
Black Duck Threat Check for Struts is a free utility that helps you quickly detect the presence of CVE-2017-5638 and other Apache Struts vulnerabilities in any application or container codebase.
With Threat Check you can:
Detect and inventory all versions Apache Struts in your code.
Identify all current known vulnerabilities affecting those versions.
Evaluate and select the appropriate mitigation and upgrade options.
Generate risk summaries and vulnerability lists for internal reporting.