org.apache.struts.xwork:xwork-core

4 results · Clear filters · Feed

• High 8.1
  CVE-2025-68493 Public exploit EPSS 50%

  Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component

  Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue.

  Apache Software Foundation Apache Struts org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  Jan 11, 2026
• High —
  CVE-2013-2134 Public exploit EPSS 70%

  Arbitrary code execution in Apache Struts 2

  Apache Struts 2 before 2.3.14.3 allows remote attackers to execute arbitrary OGNL code via a request with a crafted action name that is not properly handled during wildcard matching, a different vulnerability than CVE-2013-2135.

  org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  Jul 16, 2013
• High —
  CVE-2013-1966 Public exploit EPSS 74%

  Arbitrary code execution in Apache Struts

  Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag.

  org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  Jul 10, 2013
• High 8.1
  CVE-2013-2115 Public exploit EPSS 75%

  Code injection in Apache Struts

  Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) A tag. NOTE: this issue is due to an incomplete fix for CVE-…

  org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  Jul 10, 2013