Opensymphony Xwork vulnerabilities

• apache struts, opensymphony webwork, xwork +2 more XWork in Apache Struts Reveals Sensitive Information CVE-2011-2088 Fix available 5.0 MediumMay 13, 2011
• apache struts, opensymphony webwork, xwork +2 more Cross-site Scripting in Apache Struts CVE-2011-1772 Public exploitFix available EPSS 33.3% 2.6 LowMay 13, 2011
• apache struts, opensymphony xwork +1 more Improper Input Validation in OpenSymphony XWork CVE-2008-6504 Public exploitFix available EPSS 38.6% 5.0 MediumMarch 23, 2009
• opensymphony xwork OpenSymphony XWork vulnerable to improper input validation CVE-2007-4556 Fix available EPSS 25.7% 6.8 MediumAugust 28, 2007