org.apache.struts.xwork:xwork-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-68493Highorg.apache.struts:struts2-core: Apache Struts 2 is Missing XML Validation CVE-2016-4433Highorg.apache.struts.xwork:xwork-core: Apache Struts Open Redirect CVE-2012-4387Mediumorg.apache.struts.xwork:xwork-core: Denial of service in Apache Struts CVE-2015-1831Highorg.apache.struts:struts2-core: Incomplete exclude pattern in Apache Struts CVE-2016-4430Highorg.apache.struts.xwork:xwork-core: Apache Struts CSRF Vulnerability CVE-2011-2088Mediumorg.apache.struts.xwork:xwork-core: XWork in Apache Struts Reveals Sensitive Information CVE-2013-2134Highorg.apache.struts:struts2-core: Arbitrary code execution in Apache Struts 2 CVE-2013-2135Highorg.apache.struts:struts2-core: Arbitrary code execution in Apache Struts 2 CVE-2012-0838Highorg.apache.struts:struts2-core: Apache Struts Code injection due to conversion error CVE-2014-0094Mediumorg.apache.struts:struts2-core: ClassLoader manipulation in Apache Struts CVE-2013-1966Highorg.apache.struts:struts2-core: Arbitrary code execution in Apache Struts CVE-2013-2115Highorg.apache.struts:struts2-core: Code injection in Apache Struts CVE-2012-0394Mediumorg.apache.struts.xwork:xwork-core: Apache Struts's DebuggingInterceptor component allows remote code execution in developer mode CVE-2012-0392Mediumorg.apache.struts:struts2-core: Apache Struts's CookieInterceptor component does not use the parameter-name whitelist CVE-2012-0391Criticalorg.apache.struts:struts2-core: Apache Struts Remote Java Code Execution CVE-2012-0393Mediumorg.apache.struts.xwork:xwork-core: Apache Struts's ParameterInterceptor component does not prevent access to public constructors

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo