Skip to content

Product

opensymphony webwork vulnerabilities

2 published CVES affecting opensymphony webwork, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0

Latest opensymphony webwork CVEs

Newest publication first

  1. CVE-2011-2088 XWork in Apache Struts Reveals Sensitive Information

    Published
    MediumCVSS 5.0 EPSS 6.1%

    XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive information about internal Java class paths via vectors involving an s:submit element and a nonexistent method, a different vulnerability th...

  2. CVE-2011-1772 Cross-site Scripting in Apache Struts

    Published
    LowCVSS 2.6 EPSS 33.3%

    Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the action attribute of an s...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.