Skip to contentApache Struts vulnerabilities
- apache strutsApache Struts CSRF VulnerabilityCVE-2016-4430Fix available8.8 High
- apache strutsImproper Input Validation in Apache StrutsCVE-2016-1182EPSS 25.7%8.2 High
- apache struts, oracle banking platform, portal +2 moreImproper Input Validation in Apache StrutsCVE-2016-1181EPSS 12.7%8.1 High
- apache struts, ognl project ognl +1 moreDenial of service in Apache StrutsCVE-2016-3093Fix available5.3 Medium
- apache strutsApache Struts vulnerable to arbitrary remote code execution due to improper input validationCVE-2016-3087Public exploitFix availableEPSS 81.9%9.8 Critical
- apache strutsRemote Code Execution in Apache StrutsCVE-2016-3082Fix availableEPSS 19.2%9.8 Critical
- apache struts, huawei agile controller-campus firmware, anyoffice +17 more +19 moreApache Struts RCE VulnerabilityCVE-2016-3081In KEVPublic exploitFix availableEPSS 96.9%8.1 High
- apache strutsCross-site Scripting in Apache StrutsCVE-2016-4003Fix availableEPSS 11.6%6.1 Medium
- apache strutsApache Struts XSS VulnerabilityCVE-2016-2162Fix available6.1 Medium
- apache strutsApache Struts RCE VulnerabilityCVE-2016-0785Fix available8.8 High
- apache strutsIncomplete exclude pattern in Apache StrutsCVE-2015-1831Fix available7.5 High
- apache strutsCross-Site Request Forgery in Apache StrutsCVE-2014-7809Fix available6.8 Medium
- apache strutsImproper Input Validation in Apache StrutsCVE-2015-0899Fix availableEPSS 21.3%7.5 High
- apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0116Fix available5.8 Medium
- apache commons beanutils, struts +1 moreArbitrary code execution in Apache Commons BeanUtilsCVE-2014-0114Public exploitFix availableEPSS 99.0%7.5 High
- apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0113Public exploitFix availableEPSS 78.3%7.5 High
- apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0112Public exploitFix availableEPSS 98.1%7.5 High
- apache strutsClassLoader manipulation in Apache StrutsCVE-2014-0094Public exploitFix availableEPSS 99.4%5.0 Medium
- apache strutsApache Struts is vulnerable to Cross-site ScriptingCVE-2013-6348Fix available4.3 Medium
- apache struts, oracle flexcube private banking, mysql enterprise monitor +1 more +3 moreCode injection in Apache StrutsCVE-2013-4316Fix available10.0 High
- apache strutsApache Struts2 Broken Access Control VulnerabilityCVE-2013-4310Fix available5.8 Medium
- apache struts, archiva, fujitsu interstage business process manager analytics +1 more +3 moreCode injection in Apache StrutsCVE-2013-2251In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- apache strutsOpen redirect in Apache StrutsCVE-2013-2248Public exploitFix availableEPSS 94.7%5.8 Medium
- apache strutsArbitrary code execution in Apache Struts 2CVE-2013-2135Fix availableEPSS 13.8%9.3 High
- apache strutsArbitrary code execution in Apache Struts 2CVE-2013-2134Public exploitFix availableEPSS 70.2%9.3 High
- apache strutsCode injection in Apache StrutsCVE-2013-2115Public exploitFix availableEPSS 74.6%8.1 High
- apache strutsArbitrary code execution in Apache StrutsCVE-2013-1966Public exploitFix availableEPSS 73.7%9.3 High
- apache struts, struts2-showcase +1 moreImproper Control of Generation of Code in Apache StrutsCVE-2013-1965Public exploitFix availableEPSS 93.5%9.3 High
- apache strutsDenial of service in Apache StrutsCVE-2012-4387Fix available5.0 Medium
- apache strutsCross-Site Request Forgery in Apache StrutsCVE-2012-4386Fix available6.8 Medium
- apache strutsApache Struts Code injection due to conversion errorCVE-2012-0838Fix availableEPSS 13.7%10.0 High
- apache strutsWithdrawn Advisory: Apache Struts XSSCVE-2012-1007Public exploitEPSS 32.8%4.3 Medium
- apache strutsApache Struts Multiple Cross-site Scripting VulnerabilitiesCVE-2012-1006Public exploitFix availableEPSS 56.6%4.3 Medium
- apache strutsApache Struts 2.3.1.2 and earlier, 2.3.19-2.3.23, provides interfaces that do not properly...CVE-2011-5057Public exploitEPSS 27.2%5.0 Medium
- apache strutsApache Struts's DebuggingInterceptor component allows remote code execution in developer modeCVE-2012-0394Public exploitFix availableDisputedEPSS 72.9%6.8 Medium
- apache strutsApache Struts's ParameterInterceptor component does not prevent access to public constructorsCVE-2012-0393Public exploitFix availableEPSS 36.3%6.4 Medium
- apache strutsApache Struts's CookieInterceptor component does not use the parameter-name whitelistCVE-2012-0392Public exploitFix availableEPSS 97.5%6.8 Medium
- apache struts, struts 2 +1 moreApache Struts Remote Java Code ExecutionCVE-2012-0391In KEVPublic exploitFix availableEPSS 75.6%9.8 Critical
- apache struts, opensymphony webwork, xwork +2 moreXWork in Apache Struts Reveals Sensitive InformationCVE-2011-2088Fix available5.0 Medium
- apache strutsApache Struts Multiple XSS VulnerabilitiesCVE-2011-2087Fix available4.3 Medium
- apache struts, opensymphony webwork, xwork +2 moreCross-site Scripting in Apache StrutsCVE-2011-1772Public exploitFix availableEPSS 33.3%2.6 Low
- apache strutsServer side object manipulation in Apache StrutsCVE-2010-1870Public exploitFix availableEPSS 92.0%5.0 Medium
- apache strutsApache Struts is vulnerable to Cross-site ScriptingCVE-2008-6682Fix available4.3 Medium
- apache strutsApache Struts Cross-site Scripting vulnerabilityCVE-2008-2025Fix available4.3 Medium
- apache struts, dojotoolkit dojo +1 moreApache Struts Dojo Plugin XSS VulnerabilityCVE-2007-6726Fix available4.3 Medium
- apache strutsApache Struts directory traversal vulnerabilityCVE-2008-6505Public exploitFix availableEPSS 72.7%5.0 Medium
- apache struts, opensymphony xwork +1 moreImproper Input Validation in OpenSymphony XWorkCVE-2008-6504Public exploitFix availableEPSS 38.6%5.0 Medium
- apache strutsCross-site scripting in Apache StrutsCVE-2006-1548Fix available4.3 Medium
- apache struts, struts 1 +1 moreImproper Input Validation in Apache StrutsCVE-2006-1547In KEVFix availableEPSS 54.6%7.5 High
- apache strutsApache Struts vulnerable to Improper Input ValidationCVE-2006-1546Fix available7.5 High
- Show moreLoading…