Skip to content
OpenAdvisories

Package · Maven

org.apache.struts:struts2-parent

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.8
    CVE-2016-3090

    Apache Struts RCE Vulnerability

    The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling.

    org.apache.struts:struts2-parent Maven
  • Medium —
    CVE-2012-1006 Public exploit EPSS 57%

    Apache Struts Multiple Cross-site Scripting Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName …

    org.apache.struts:struts2-parent Maven
  • Medium —
    CVE-2011-2087

    Apache Struts Multiple XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .a…

    org.apache.struts:struts2-parent Maven