Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
org.apache.struts.xwork:xwork-core
Maven
· Package
16 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Apache Struts Remote Java Code Execution
CVE-2012-0391 · GHSA-4WRR-9H5R-M92W
org.apache.struts.xwork:xwork-core
org.apache.struts:struts2-core
Maven
Critical
Fix reported
2026-05-05
Apache Struts 2 is Missing XML Validation
CVE-2025-68493 · GHSA-QCFC-HMRC-59X7
com.opensymphony:xwork
org.apache.struts.xwork:xwork-core
Maven
Red Hat
High
Fix reported
2026-02-03
Arbitrary code execution in Apache Struts 2
CVE-2013-2135 · GHSA-PW8R-X2QM-3H5M
org.apache.struts.xwork:xwork-core
org.apache.struts:struts2-core
Maven
High
Fix reported
2024-12-06
Incomplete exclude pattern in Apache Struts
CVE-2015-1831 · GHSA-Q2CG-XF9P-H457
org.apache.struts.xwork:xwork-core
org.apache.struts:struts2-core
Maven
High
Fix reported
2024-12-06
Denial of service in Apache Struts
CVE-2012-4387 · GHSA-HRGC-54MV-58GV
org.apache.struts.xwork:xwork-core
Maven
Medium
Fix reported
2024-12-06
ClassLoader manipulation in Apache Struts
CVE-2014-0094 · GHSA-VRWC-QJMW-5RJM
org.apache.struts.xwork:xwork-core
org.apache.struts:struts2-core
Maven
Medium
Fix reported
2024-12-06
Apache Struts Code injection due to conversion error
CVE-2012-0838 · GHSA-MWRX-HX6X-3HHV
org.apache.struts.xwork:xwork-core
org.apache.struts:struts2-core
Maven
High
Fix reported
2024-12-05
Apache Struts's CookieInterceptor component does not use the parameter-name whitelist
CVE-2012-0392 · GHSA-2PPP-XJ34-VVF7
org.apache.struts.xwork:xwork-core
org.apache.struts:struts2-core
Maven
Medium
Fix reported
2024-12-05
Arbitrary code execution in Apache Struts
CVE-2013-1966 · GHSA-737W-MH58-CXJP
org.apache.struts.xwork:xwork-core
org.apache.struts:struts2-core
Maven
High
Fix reported
2024-12-05
Arbitrary code execution in Apache Struts 2
CVE-2013-2134 · GHSA-GQQM-564F-VVXQ
org.apache.struts.xwork:xwork-core
org.apache.struts:struts2-core
Maven
High
Fix reported
2024-12-05
Apache Struts's DebuggingInterceptor component allows remote code execution in developer mode
CVE-2012-0394 · GHSA-HMVJ-GC9Q-MG9P
org.apache.struts.xwork:xwork-core
Maven
Medium
Fix reported
2024-12-03
Apache Struts's ParameterInterceptor component does not prevent access to public constructors
CVE-2012-0393 · GHSA-HXQQ-W4MR-MC62
org.apache.struts.xwork:xwork-core
org.apache.struts:struts2-core
Maven
Medium
Fix reported
2024-12-03
XWork in Apache Struts Reveals Sensitive Information
CVE-2011-2088 · GHSA-9CCM-G362-2R35
org.apache.struts.xwork:xwork-core
Maven
Medium
Fix reported
2024-12-02
Apache Struts Open Redirect
CVE-2016-4433 · GHSA-WM8W-QP2F-728Q
org.apache.struts.xwork:xwork-core
Maven
High
Fix reported
2024-02-16
Code injection in Apache Struts
CVE-2013-2115 · GHSA-7GHM-RPC7-P7G5
org.apache.struts.xwork:xwork-core
org.apache.struts:struts2-core
Maven
High
Fix reported
2024-02-16
Apache Struts CSRF Vulnerability
CVE-2016-4430 · GHSA-38QW-J787-V8C2
org.apache.struts.xwork:xwork-core
Maven
High
Fix reported
2024-02-16
