Skip to content

Product

org.apache.struts/struts2-parent vulnerabilities

3 published CVES affecting org.apache.struts/struts2-parent, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.struts/struts2-parent CVEs

Newest publication first

  1. CVE-2016-3090 Apache Struts RCE Vulnerability

    Published
    HighCVSS 8.8 EPSS 5.7%

    The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling.

  2. CVE-2012-1006 Apache Struts Multiple Cross-site Scripting Vulnerabilities

    Published
    MediumCVSS 4.3 EPSS 56.6%

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName parameter to struts2-...

  3. CVE-2011-2087 Apache Struts Multiple XSS Vulnerabilities

    Published
    MediumCVSS 4.3 EPSS 6.1%

    Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .action URI, related to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.