org.apache.struts:struts2-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-68493Highorg.apache.struts:struts2-core: Apache Struts 2 is Missing XML Validation CVE-2025-66675Highorg.apache.struts:struts2-core: Apache Struts has a Denial of Service vulnerability CVE-2025-64775Highorg.apache.struts:struts2-core: Apache Struts is Vulnerable to DoS via File Leak CVE-2024-53677Criticalorg.apache.struts:struts2-core: Apache Struts file upload logic is flawed CVE-2023-50164Criticalorg.apache.struts:struts2-core: Apache Struts vulnerable to path traversal CVE-2023-41835Highorg.apache.struts:struts2-core: Apache Struts Improper Control of Dynamically-Managed Code Resources vulnerability CVE-2023-34396Highorg.apache.struts:struts2-core: Apache Struts vulnerable to memory exhaustion CVE-2023-34149Mediumorg.apache.struts:struts2-core: Apache Struts vulnerable to memory exhaustion CVE-2019-0233Highorg.apache.struts:struts2-core: Improper Preservation of Permissions in Apache Struts CVE-2015-2992Mediumorg.apache.struts:struts2-core: Cross-site Scripting in Apache Struts CVE-2008-6682Mediumorg.apache.struts:struts2-core: Apache Struts is vulnerable to Cross-site Scripting CVE-2008-6505Mediumorg.apache.struts:struts2-core: Apache Struts directory traversal vulnerability CVE-2011-1772Loworg.apache.struts:struts2-core: Cross-site Scripting in Apache Struts CVE-2013-6348Mediumorg.apache.struts:struts2-core: Apache Struts is vulnerable to Cross-site Scripting CVE-2013-4310Mediumorg.apache.struts:struts2-core: Apache Struts2 Broken Access Control Vulnerability CVE-2016-2162Mediumorg.apache.struts:struts2-core: Apache Struts XSS Vulnerability CVE-2016-3082Criticalorg.apache.struts:struts2-core: Remote Code Execution in Apache Struts CVE-2016-3093Mediumorg.apache.struts:struts2-core: Denial of service in Apache Struts CVE-2013-4316Highorg.apache.struts:struts2-core: Code injection in Apache Struts CVE-2013-2248Mediumorg.apache.struts:struts2-core: Open redirect in Apache Struts CVE-2016-4436Criticalorg.apache.struts:struts2-core: Apache Struts improper action name cleanup CVE-2016-4465Mediumorg.apache.struts:struts2-core: Apache Struts vulnerable to possible DoS attack when using URLValidator CVE-2012-4386Mediumorg.apache.struts:struts2-core: Cross-Site Request Forgery in Apache Struts CVE-2015-1831Highorg.apache.struts:struts2-core: Incomplete exclude pattern in Apache Struts CVE-2015-5209Highorg.apache.struts:struts2-core: Special top object can be used to access Struts' internals

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo