What we do
How we do it
Resources
Company
Partners
Get Started
What we do
How we do it
Resources
Company
Partners
Request a Quote
What We Do
ESENTIRE SERVICES
Managed Risk Programs →

Cyber risk and advisory programs that identify security gaps and build strategies to address them.
Managed Detection & Response →

MDR that provides improved detection, 24/7 threat hunting, end-to-end coverage and most of all, complete Response.
Digital Forensics & Incident Response →

Our team delivers the fastest response time in the industry. Threat suppression within just 4 hours of being engaged.
ESENTIRE PLATFORM
Atlas Extended Detection & Response (XDR) →

XDR with Machine Learning that eliminates noise, enables real-time detection and response, and automatically blocks threats.
ESENTIRE PEOPLE
Cyber Resilience Team

Be protected by the best from Day 1.
Security Operations Center (SOC)

24/7 Threat Investigation and Response.
Threat Response Unit

Expert hunting, research and content.
ESENTIRE MDR FOR MICROSOFT

Visibility and Response Across Your Entire Microsoft Security Ecosystem

Learn More
How we do it
MDR PACKAGES AND PRICING
eSentire MDR Essentials
Multi-signal MDR services for small to medium businesses with 24/7 SOC support, threat hunting, and response expertise.
eSentire MDR Expert
Multi-signal MDR services with co-managed log service, Cyber Risk Advisor support, and added signal visibility and containment.
eSentire MDR Elite
Multi-signal MDR services with a dedicated Cyber Risk Advisor, risk reduction roadmap and executive meeting support.
 Request a Quote
INDUSTRIES
Insurance Construction Finance Legal Manufacturing Private Equity Healthcare Retail Food Supply SLED
USE CASES
Ransomware
Stop ransomware attacks before they disrupt your business.
Third-party Risk
Protect against third-party and supply chain risk.
Sensitive Data
Protect your most sensitive data.
Cloud Misconfiguration
Eliminate misconfigurations and policy violations.
Zero Day Attacks
Detect and respond to zero-day exploits.
Cyber Risk
Adopt a risk-based approach to cybersecurity.
Cybersecurity Compliance
Meet cybersecurity regulatory compliance mandates.
Do More With Less
Prevent business disruption by outsourcing MDR.
24/7 MDR SIGNALS
Network

Defend brute force attacks, active intrusions and unauthorized scans.
Endpoint

Safeguard endpoints 24/7 by isolating and remediating threats to prevent lateral spread.
Log

Investigation and enhanced threat detection across multi-cloud or hybrid environments.
Cloud

Configuration escalations, policy and posture management.
Insider Threat

Detects malicious insider behavior leveraging Machine Learning models.
Resources
FROM THE BLOG
BatLoader Impersonates Midjourney, ChatGPT in Drive-by Cyberattacks
Read more
PaperCut Vulnerability Exploited to Deliver Cryptocurrency Miner to…
Read more
eSentire Recognized as a Top Cybersecurity Leader in the Middle East
Read more
Visit the eSentire Blog →
RESOURCES
Case Studies

Customer testimonials and case studies.
Videos

Stories on cyberattacks, customers, employees, and more.
Reports

Cyber incident, analyst, and thought leadership reports.
Webinars

Demonstrations, seminars and presentations on cybersecurity topics.
Data Sheets

Information and solution briefs for our services.
Cybersecurity Tools

MITRE ATT&CK Framework, Cybersecurity Assessment, SOC Calculator & more
Visit Resource Library →
TRU INTELLIGENCE CENTER
Our Threat Response Unit (TRU) publishes security advisories, blogs, reports, industry publications and webinars based on its original research and the insights driven through proactive threat hunts.
View Threat Intelligence Resources →
SECURITY ADVISORIES
May 09, 2023
Snake Malware 
THE THREAT The FBI in coordination with Five Eyes intelligence partners have shared in-depth information ,as well as details on a recent disruption of infrastructure for Snake malware. Snake is an…
Read More
View all Advisories →
Company
ABOUT ESENTIRE
About Us
eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 2000+ organizations in 80+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
Read about how we got here
Leadership Work at eSentire
EVENT CALENDAR
May
31
NetDiligence Cyber Risk Summit

eSentire will be a Sponsor at the NetDeligence Cyber Risk Summit in Fort…
May
31
Memorial Insights Special

eSentire will be attending Avant's Memorial Insights Special.
Jun
01
AppDirect Boston Regional Event

eSentire will be attending this event.
View Event Calendar →
LATEST PRESS RELEASE
Mar 20, 2023
Exertis and eSentire Partner to Deliver 24/7 Multi-Signal MDR, Digital Forensics & IR Services and Exposure Management to Organisations Across the UK, Ireland, and Europe
Basingstoke, UK– 20 March, 2023. Leading technology distributor, Exertis, announced today that it has bolstered its cybersecurity services, adding eSentire, the Authority in Managed Detection and Response (MDR), to its Enterprise portfolio of offerings. eSentire’s award-winning, 24/7 multi-signal MDR, Digital Forensics & Incident Response (IR), and Exposure Management services will be available…
Read More
View Newsroom →
Partners
PARTNER PROGRAM
e3 Ecosystem
We provide sophisticated cybersecurity solutions for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and Value-Added Resellers (VARs). Find out why you should partner with eSentire, the Authority in Managed Detection and Response, today.
Learn more
ECOSYSTEM PARTNER RESOURCES
Apply to become an e3 ecosystem partner with eSentire, the Authority in Managed Detection and Response.
Become an Ecosystem Partner →
Login to the Partner Portal for resources and content for current partners.
Partner Login →
Search
Resources
Resource Library Tools Case Studies Video Library Glossary Security Advisories Blog
Security advisories — Feb 27, 2019

RCE Vulnerability in Apache Struts

1 minute read

SHARE:

Speak With A Security Expert Now

On August 22, 2018, the Apache Software Foundation acknowledged a critical Remote Code Execution (RCE) vulnerability in all versions of Apache Struts 2 [1]. Successful Remote Code Execution could allow threat actors to perform a variety of malicious actions and potentially gain full remote access to the affected system. Previously, exploits for critical vulnerabilities in Apache Struts were developed a short time after disclosure [2]. The prevalence of Apache Struts combined with the potential impact creates considerable motivation for threat actors to weaponize the latest vulnerability. This vulnerability is being publicly tracked as CVE-2018-11776 [3].

What we’re doing about it

What you should be doing about it

Additional information

Resources:

[1] S2-057
https://cwiki.apache.org/confluence/display/WW/S2-057

[2] Synopsis: Software Integrity Blog: Examining Apache Struts remote code execution vulnerabilities
https://www.synopsys.com/blogs/software-security/apache-struts-remote-code-execution-vulnerabilities/

[3] Common Vulnerabilities and Exposures CVE-2018-11776
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11776

[4] Semmle Discovers Critical Remote Code Execution Vulnerability in Apache Struts (CVE-2018-11776)
https://semmle.com/news/apache-struts-CVE-2018-11776

View Most Recent Blogs
Are you experiencing a security incident or have you been breached? Call us now.
1-866-579-2200
Sales and Customer Support
North America
1-866-579-2200 EMEA
(0)8000 443242 Africa/APAC
+1 519 651 2200 Partner Login → Get Started →
What we do
How we do it
Resources
Company
Tools

The Authority in Managed Detection and Response.

2023 eSentire, Inc. All Rights Reserved.