Apache Struts vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
19 matching records
- High8.1Apache Struts Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 50.42%Jan 11, 2026
- UnknownApache Struts File Upload VulnerabilityPatch nowKEVEPSS 72.37%Dec 15, 2024
- UnknownApache Struts Improper Input ValidationPatch nowKEVEPSS 87.12%Apr 15, 2024
- UnknownApache Struts Files or Directories Accessible to External PartiesPatch nowKEVEPSS 80.82%Jan 31, 2024
- UnknownApache Struts Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')Patch nowKEVEPSS 85.43%May 11, 2022
- UnknownApache Struts CookieInterceptor VulnerabilityPatch nowKEVEPSS 78.32%May 11, 2022
- UnknownApache Struts ParametersInterceptor ClassLoader Maniupulation VulnerabilityPatch nowKEVEPSS 98.06%May 11, 2022
- UnknownApache Struts ParametersInterceptor VulnerabilityPatch nowKEVEPSS 99.39%May 11, 2022
- Critical9.8Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 96.25%Dec 10, 2020
- UnknownApache Struts Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')Patch nowKEVEPSS 96.95%Sep 14, 2020
- High8.1Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Aug 22, 2018
- High8.1Apache Struts Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.40%Sep 15, 2017
- Critical9.8Apache Struts 1 Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.91%Jul 10, 2017
- Critical9.8Apache Struts Remote Code Execution VulnerabilityPatch nowKEVEPSS 100.00%Mar 10, 2017
- High8.1Apache Struts Command Injection VulnerabilityPatch nowKEVEPSS 96.53%Apr 26, 2016
- Critical9.8Apache Struts Improper Input Validation VulnerabilityPatch nowKEVEPSS 100.00%Jul 18, 2013
- Critical9.3Apache Struts Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 70.21%Jul 16, 2013
- Critical9.8Apache Struts 2 Improper Input Validation VulnerabilityPatch nowKEVEPSS 75.60%Jan 8, 2012
- High7.5Apache Struts 1 ActionForm Denial-of-Service VulnerabilityPatch nowKEVEPSS 54.63%Mar 30, 2006
Sort
19 records