Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.struts/struts2-core@2.0.5
Typemaven
Namespaceorg.apache.struts
Namestruts2-core
Version2.0.5
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.5.30
Latest_non_vulnerable_version7.1.1
Affected_by_vulnerabilities
0
url VCID-1xhe-mz8d-eyem
vulnerability_id VCID-1xhe-mz8d-eyem
summary
references
0
reference_url http://packetstormsecurity.com/files/172830/Apache-Struts-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url http://packetstormsecurity.com/files/172830/Apache-Struts-Remote-Code-Execution.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-11776
reference_id
reference_type
scores
0
value 0.94431
scoring_system epss
scoring_elements 0.99986
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-11776
2
reference_url https://cwiki.apache.org/confluence/display/WW/S2-057
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://cwiki.apache.org/confluence/display/WW/S2-057
3
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
4
reference_url https://github.com/apache/struts/commit/4a3917176de2df7f33a85511d067f31e50dcc1b
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/4a3917176de2df7f33a85511d067f31e50dcc1b
5
reference_url https://github.com/apache/struts/commit/6e87474f9ad0549f07dd2c37d50a9ccd0977c6e
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/6e87474f9ad0549f07dd2c37d50a9ccd0977c6e
6
reference_url https://github.com/apache/struts/commit/6efaf900d4ffb7be8a74065af5553bad2389f72
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/6efaf900d4ffb7be8a74065af5553bad2389f72
7
reference_url https://github.com/apache/struts/commit/b3bad5ea44f3fd9edb2cb491192c5900f46d45d
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/b3bad5ea44f3fd9edb2cb491192c5900f46d45d
8
reference_url https://lgtm.com/blog/apache_struts_CVE-2018-11776
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://lgtm.com/blog/apache_struts_CVE-2018-11776
9
reference_url https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c@%3Cannounce.apache.org%3E
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c@%3Cannounce.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://lists.apache.org/thread.html/r6d03e45b81eab03580cf7f8bb51cb3e9a1b10a2cc0c6a2d3cc92ed0c%40%3Cannounce.apache.org%3E
11
reference_url https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0012
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0012
12
reference_url https://security.netapp.com/advisory/ntap-20180822-0001
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20180822-0001
13
reference_url https://security.netapp.com/advisory/ntap-20181018-0002
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20181018-0002
14
reference_url https://web.archive.org/web/20180822160726/http://www.securityfocus.com/bid/105125
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20180822160726/http://www.securityfocus.com/bid/105125
15
reference_url https://web.archive.org/web/20200807025819/http://www.securitytracker.com/id/1041888
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200807025819/http://www.securitytracker.com/id/1041888
16
reference_url https://web.archive.org/web/20201208145803/https://securitytracker.com/id/1041547
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201208145803/https://securitytracker.com/id/1041547
17
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-11776
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-11776
18
reference_url https://www.exploit-db.com/exploits/45260
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/45260
19
reference_url https://www.exploit-db.com/exploits/45262
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/45262
20
reference_url https://www.exploit-db.com/exploits/45367
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/45367
21
reference_url https://www.oracle.com/security-alerts/cpujul2020.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://www.oracle.com/security-alerts/cpujul2020.html
22
reference_url https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
23
reference_url http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-005.txt
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-005.txt
24
reference_url http://www.oracle.com/technetwork/security-advisory/alert-cve-2018-11776-5072787.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url http://www.oracle.com/technetwork/security-advisory/alert-cve-2018-11776-5072787.html
25
reference_url http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
26
reference_url http://www.securityfocus.com/bid/105125
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url http://www.securityfocus.com/bid/105125
27
reference_url http://www.securitytracker.com/id/1041547
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url http://www.securitytracker.com/id/1041547
28
reference_url http://www.securitytracker.com/id/1041888
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url http://www.securitytracker.com/id/1041888
29
reference_url https://www.exploit-db.com/exploits/45260/
reference_id 45260
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://www.exploit-db.com/exploits/45260/
30
reference_url https://www.exploit-db.com/exploits/45262/
reference_id 45262
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://www.exploit-db.com/exploits/45262/
31
reference_url https://www.exploit-db.com/exploits/45367/
reference_id 45367
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://www.exploit-db.com/exploits/45367/
32
reference_url https://github.com/hook-s3c/CVE-2018-11776-Python-PoC/blob/343bf070cc8649803ea865bd64543234fec1a4f6/exploitS2-057-cmd.py
reference_id CVE-2018-11776
reference_type exploit
scores
url https://github.com/hook-s3c/CVE-2018-11776-Python-PoC/blob/343bf070cc8649803ea865bd64543234fec1a4f6/exploitS2-057-cmd.py
33
reference_url https://github.com/mazen160/struts-pwn_CVE-2018-11776/blob/ffaefa75242315913a8f695b6d5eab8b6143794d/struts-pwn.py
reference_id CVE-2018-11776
reference_type exploit
scores
url https://github.com/mazen160/struts-pwn_CVE-2018-11776/blob/ffaefa75242315913a8f695b6d5eab8b6143794d/struts-pwn.py
34
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45260.py
reference_id CVE-2018-11776
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45260.py
35
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/45262.py
reference_id CVE-2018-11776
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/45262.py
36
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/45367.rb
reference_id CVE-2018-11776
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/45367.rb
37
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-11776
reference_id CVE-2018-11776
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-11776
38
reference_url https://raw.githubusercontent.com/rapid7/metasploit-framework/718aaca0f4a25827695d643568beaa784ff21518/modules/exploits/multi/http/struts2_namespace_ognl.rb
reference_id CVE-2018-11776
reference_type exploit
scores
url https://raw.githubusercontent.com/rapid7/metasploit-framework/718aaca0f4a25827695d643568beaa784ff21518/modules/exploits/multi/http/struts2_namespace_ognl.rb
39
reference_url https://github.com/hook-s3c/CVE-2018-11776-Python-PoC
reference_id CVE-2018-11776-PYTHON-POC
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://github.com/hook-s3c/CVE-2018-11776-Python-PoC
40
reference_url https://github.com/advisories/GHSA-cr6j-3jp9-rw65
reference_id GHSA-cr6j-3jp9-rw65
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cr6j-3jp9-rw65
41
reference_url https://security.netapp.com/advisory/ntap-20180822-0001/
reference_id ntap-20180822-0001
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Attend
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-06T21:01:33Z/
url https://security.netapp.com/advisory/ntap-20180822-0001/
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.35
purl pkg:maven/org.apache.struts/struts2-core@2.3.35
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3q92-5sz9-2kd3
1
vulnerability VCID-ce3p-yaze-v7fy
2
vulnerability VCID-fmf4-k1py-g7fh
3
vulnerability VCID-jyrs-6kjh-3qfa
4
vulnerability VCID-nb8f-hdtw-9fdk
5
vulnerability VCID-t9vy-6y7q-e3ac
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.35
1
url pkg:maven/org.apache.struts/struts2-core@2.5.17
purl pkg:maven/org.apache.struts/struts2-core@2.5.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce3p-yaze-v7fy
1
vulnerability VCID-fmf4-k1py-g7fh
2
vulnerability VCID-jyrs-6kjh-3qfa
3
vulnerability VCID-nb8f-hdtw-9fdk
4
vulnerability VCID-t9vy-6y7q-e3ac
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.17
aliases CVE-2018-11776, GHSA-cr6j-3jp9-rw65
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1xhe-mz8d-eyem
1
url VCID-1xze-jfs9-yyba
vulnerability_id VCID-1xze-jfs9-yyba
summary
references
0
reference_url http://archiva.apache.org/security.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://archiva.apache.org/security.html
1
reference_url http://cxsecurity.com/issue/WLB-2014010087
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://cxsecurity.com/issue/WLB-2014010087
2
reference_url http://packetstormsecurity.com/files/159629/Apache-Struts-2-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://packetstormsecurity.com/files/159629/Apache-Struts-2-Remote-Code-Execution.html
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2251
reference_id
reference_type
scores
0
value 0.94325
scoring_system epss
scoring_elements 0.99954
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2251
4
reference_url http://seclists.org/fulldisclosure/2013/Oct/96
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://seclists.org/fulldisclosure/2013/Oct/96
5
reference_url http://seclists.org/oss-sec/2014/q1/89
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://seclists.org/oss-sec/2014/q1/89
6
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/90392
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url https://exchange.xforce.ibmcloud.com/vulnerabilities/90392
7
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
8
reference_url https://github.com/apache/struts/commit/3cfe34fefedcf0fdcfcb061c0aea34a715b7de6
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/3cfe34fefedcf0fdcfcb061c0aea34a715b7de6
9
reference_url https://github.com/apache/struts/commit/630e1ba065a8215c4e9ac03bfb09be9d655c2b6e
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/630e1ba065a8215c4e9ac03bfb09be9d655c2b6e
10
reference_url https://issues.apache.org/jira/browse/WW-4140
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4140
11
reference_url http://struts.apache.org/release/2.3.x/docs/s2-016.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://struts.apache.org/release/2.3.x/docs/s2-016.html
12
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2251
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2251
13
reference_url http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-struts2
14
reference_url http://www.fujitsu.com/global/support/software/security/products-f/interstage-bpm-analytics-201301e.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://www.fujitsu.com/global/support/software/security/products-f/interstage-bpm-analytics-201301e.html
15
reference_url http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
16
reference_url http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
17
reference_url http://www.securitytracker.com/id/1029184
reference_id 1029184
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://www.securitytracker.com/id/1029184
18
reference_url http://www.securitytracker.com/id/1032916
reference_id 1032916
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://www.securitytracker.com/id/1032916
19
reference_url http://www.securityfocus.com/bid/61189
reference_id 61189
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://www.securityfocus.com/bid/61189
20
reference_url http://osvdb.org/98445
reference_id 98445
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-07T13:24:31Z/
url http://osvdb.org/98445
21
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/44583.txt
reference_id CVE-2013-2251
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/44583.txt
22
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-2251
reference_id CVE-2013-2251
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-2251
23
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/27135.rb
reference_id CVE-2013-2251;OSVDB-95405
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/27135.rb
24
reference_url https://github.com/advisories/GHSA-47qp-8v9g-39hp
reference_id GHSA-47qp-8v9g-39hp
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-47qp-8v9g-39hp
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.15.1
purl pkg:maven/org.apache.struts/struts2-core@2.3.15.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-c5xy-yhrn-fqf2
9
vulnerability VCID-ce3p-yaze-v7fy
10
vulnerability VCID-dzkb-wjvw-qufb
11
vulnerability VCID-ee2d-r8vy-skhq
12
vulnerability VCID-es18-pf68-h3de
13
vulnerability VCID-ev69-3d1j-nuac
14
vulnerability VCID-f4kx-q41m-5qer
15
vulnerability VCID-fmf4-k1py-g7fh
16
vulnerability VCID-hszd-513t-xucj
17
vulnerability VCID-huug-6mey-9fgz
18
vulnerability VCID-jyrs-6kjh-3qfa
19
vulnerability VCID-k6eu-y8xc-5kbj
20
vulnerability VCID-knq3-w2wm-4uae
21
vulnerability VCID-n7x9-wj56-a7gr
22
vulnerability VCID-nb8f-hdtw-9fdk
23
vulnerability VCID-nqwc-36ke-b3ff
24
vulnerability VCID-pjw9-sxen-b3cu
25
vulnerability VCID-q9p6-sxpv-g7gp
26
vulnerability VCID-sd6f-umkv-ffc2
27
vulnerability VCID-t9vy-6y7q-e3ac
28
vulnerability VCID-ubk6-8mnk-bqet
29
vulnerability VCID-y65y-kv8s-q3ef
30
vulnerability VCID-ycjb-zszd-4ufy
31
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.15.1
aliases CVE-2013-2251, GHSA-47qp-8v9g-39hp
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1xze-jfs9-yyba
2
url VCID-2p29-qaqw-9fa9
vulnerability_id VCID-2p29-qaqw-9fa9
summary 
Manipulation of Struts internals
This package allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5209
reference_id
reference_type
scores
0
value 0.01362
scoring_system epss
scoring_elements 0.80482
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5209
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-5209
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-5209
2
reference_url https://security.netapp.com/advisory/ntap-20180629-0002
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20180629-0002
3
reference_url https://struts.apache.org/docs/s2-026.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://struts.apache.org/docs/s2-026.html
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.24.1
purl pkg:maven/org.apache.struts/struts2-core@2.3.24.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2qup-v76d-8bge
2
vulnerability VCID-3q92-5sz9-2kd3
3
vulnerability VCID-86yh-tym8-f3hh
4
vulnerability VCID-8huk-86a6-27cw
5
vulnerability VCID-8zze-44sk-audx
6
vulnerability VCID-aaet-jdfc-mbek
7
vulnerability VCID-ce3p-yaze-v7fy
8
vulnerability VCID-d7b9-rv1g-qkfp
9
vulnerability VCID-ee2d-r8vy-skhq
10
vulnerability VCID-ev69-3d1j-nuac
11
vulnerability VCID-fdat-drnp-yudv
12
vulnerability VCID-fmf4-k1py-g7fh
13
vulnerability VCID-hszd-513t-xucj
14
vulnerability VCID-jyrs-6kjh-3qfa
15
vulnerability VCID-nb8f-hdtw-9fdk
16
vulnerability VCID-pjw9-sxen-b3cu
17
vulnerability VCID-q9p6-sxpv-g7gp
18
vulnerability VCID-t9vy-6y7q-e3ac
19
vulnerability VCID-vurd-7tee-e7a9
20
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.24.1
aliases CVE-2015-5209, GHSA-4qgj-9mvg-3929
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2p29-qaqw-9fa9
3
url VCID-2qup-v76d-8bge
vulnerability_id VCID-2qup-v76d-8bge
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4436
reference_id
reference_type
scores
0
value 0.05743
scoring_system epss
scoring_elements 0.90587
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4436
1
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
2
reference_url https://github.com/apache/struts/commit/237432512df0e27013f7c7b9ab59fdce44ca34a5
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/237432512df0e27013f7c7b9ab59fdce44ca34a5
3
reference_url https://github.com/apache/struts/commit/27ca165ddbf81c84bafbd083b99a18d89cc49ca7
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/27ca165ddbf81c84bafbd083b99a18d89cc49ca7
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-4436
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-4436
5
reference_url https://struts.apache.org/docs/s2-035.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://struts.apache.org/docs/s2-035.html
6
reference_url https://web.archive.org/web/20161015140316/http://www.securityfocus.com/bid/91280
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20161015140316/http://www.securityfocus.com/bid/91280
7
reference_url https://web.archive.org/web/20161015140316/http://www.securityfocus.com/bid/91280/
reference_id
reference_type
scores
url https://web.archive.org/web/20161015140316/http://www.securityfocus.com/bid/91280/
8
reference_url http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=ssg1S1009282
9
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21987854
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=swg21987854
10
reference_url http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html
11
reference_url https://github.com/advisories/GHSA-xm92-v2mq-842q
reference_id GHSA-xm92-v2mq-842q
reference_type
scores
url https://github.com/advisories/GHSA-xm92-v2mq-842q
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.29
purl pkg:maven/org.apache.struts/struts2-core@2.3.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-3q92-5sz9-2kd3
2
vulnerability VCID-86yh-tym8-f3hh
3
vulnerability VCID-aaet-jdfc-mbek
4
vulnerability VCID-ce3p-yaze-v7fy
5
vulnerability VCID-f4kx-q41m-5qer
6
vulnerability VCID-fmf4-k1py-g7fh
7
vulnerability VCID-jyrs-6kjh-3qfa
8
vulnerability VCID-n7x9-wj56-a7gr
9
vulnerability VCID-nb8f-hdtw-9fdk
10
vulnerability VCID-t9vy-6y7q-e3ac
11
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.29
1
url pkg:maven/org.apache.struts/struts2-core@2.5.1
purl pkg:maven/org.apache.struts/struts2-core@2.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2rqk-2gkx-dkds
2
vulnerability VCID-3q92-5sz9-2kd3
3
vulnerability VCID-86yh-tym8-f3hh
4
vulnerability VCID-aaet-jdfc-mbek
5
vulnerability VCID-ce3p-yaze-v7fy
6
vulnerability VCID-f4kx-q41m-5qer
7
vulnerability VCID-fmf4-k1py-g7fh
8
vulnerability VCID-jyrs-6kjh-3qfa
9
vulnerability VCID-n7x9-wj56-a7gr
10
vulnerability VCID-nb8f-hdtw-9fdk
11
vulnerability VCID-t9vy-6y7q-e3ac
12
vulnerability VCID-tmm5-hrp4-r7hy
13
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.1
aliases CVE-2016-4436, GHSA-xm92-v2mq-842q
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2qup-v76d-8bge
4
url VCID-4vrt-hdq4-7kc6
vulnerability_id VCID-4vrt-hdq4-7kc6
summary
references
0
reference_url http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-0393
reference_id
reference_type
scores
0
value 0.73632
scoring_system epss
scoring_elements 0.98834
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-0393
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/commit/25e50069d60434a30395e3a98357ffba2bed427e
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/25e50069d60434a30395e3a98357ffba2bed427e
4
reference_url https://github.com/apache/struts/commit/9cad25f258bb2629d263f828574d2671366c238d
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/9cad25f258bb2629d263f828574d2671366c238d
5
reference_url http://struts.apache.org/2.x/docs/s2-008.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.x/docs/s2-008.html
6
reference_url http://struts.apache.org/2.x/docs/version-notes-2311.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.x/docs/version-notes-2311.html
7
reference_url https://web.archive.org/web/20120612142634/https://sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20120612142634/https://sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt
8
reference_url https://web.archive.org/web/20140723153720/http://secunia.com/advisories/47393
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140723153720/http://secunia.com/advisories/47393
9
reference_url https://web.archive.org/web/20140723153720/http://secunia.com/advisories/47393/
reference_id
reference_type
scores
url https://web.archive.org/web/20140723153720/http://secunia.com/advisories/47393/
10
reference_url http://www.exploit-db.com/exploits/18329
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.exploit-db.com/exploits/18329
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-0393
reference_id CVE-2012-0393
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-0393
12
reference_url https://github.com/advisories/GHSA-hxqq-w4mr-mc62
reference_id GHSA-hxqq-w4mr-mc62
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hxqq-w4mr-mc62
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.2.3.1
purl pkg:maven/org.apache.struts/struts2-core@2.2.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-5h58-smn3-gkh7
6
vulnerability VCID-6b94-6fkt-afdu
7
vulnerability VCID-6f4g-r6bc-63fg
8
vulnerability VCID-8huk-86a6-27cw
9
vulnerability VCID-8zze-44sk-audx
10
vulnerability VCID-c5xy-yhrn-fqf2
11
vulnerability VCID-ce3p-yaze-v7fy
12
vulnerability VCID-dzkb-wjvw-qufb
13
vulnerability VCID-ee2d-r8vy-skhq
14
vulnerability VCID-es18-pf68-h3de
15
vulnerability VCID-ev69-3d1j-nuac
16
vulnerability VCID-f4kx-q41m-5qer
17
vulnerability VCID-fmf4-k1py-g7fh
18
vulnerability VCID-gbqn-ywy3-d7cu
19
vulnerability VCID-hkhz-8ee5-57fm
20
vulnerability VCID-hszd-513t-xucj
21
vulnerability VCID-huug-6mey-9fgz
22
vulnerability VCID-jyrs-6kjh-3qfa
23
vulnerability VCID-k6eu-y8xc-5kbj
24
vulnerability VCID-knq3-w2wm-4uae
25
vulnerability VCID-mw23-ujhz-a7cs
26
vulnerability VCID-nb8f-hdtw-9fdk
27
vulnerability VCID-nqwc-36ke-b3ff
28
vulnerability VCID-pjw9-sxen-b3cu
29
vulnerability VCID-pmr8-6zz1-ryf2
30
vulnerability VCID-pr67-cm26-w7hm
31
vulnerability VCID-q9p6-sxpv-g7gp
32
vulnerability VCID-sd6f-umkv-ffc2
33
vulnerability VCID-sgb7-h4sp-dbgf
34
vulnerability VCID-t9vy-6y7q-e3ac
35
vulnerability VCID-ubk6-8mnk-bqet
36
vulnerability VCID-y65y-kv8s-q3ef
37
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.2.3.1
1
url pkg:maven/org.apache.struts/struts2-core@2.3.1.1
purl pkg:maven/org.apache.struts/struts2-core@2.3.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-5h58-smn3-gkh7
6
vulnerability VCID-6b94-6fkt-afdu
7
vulnerability VCID-6f4g-r6bc-63fg
8
vulnerability VCID-86yh-tym8-f3hh
9
vulnerability VCID-8huk-86a6-27cw
10
vulnerability VCID-8zze-44sk-audx
11
vulnerability VCID-aaet-jdfc-mbek
12
vulnerability VCID-c5xy-yhrn-fqf2
13
vulnerability VCID-ce3p-yaze-v7fy
14
vulnerability VCID-dzkb-wjvw-qufb
15
vulnerability VCID-ee2d-r8vy-skhq
16
vulnerability VCID-es18-pf68-h3de
17
vulnerability VCID-ev69-3d1j-nuac
18
vulnerability VCID-f4kx-q41m-5qer
19
vulnerability VCID-fmf4-k1py-g7fh
20
vulnerability VCID-gbqn-ywy3-d7cu
21
vulnerability VCID-hkhz-8ee5-57fm
22
vulnerability VCID-hszd-513t-xucj
23
vulnerability VCID-huug-6mey-9fgz
24
vulnerability VCID-jyrs-6kjh-3qfa
25
vulnerability VCID-k6eu-y8xc-5kbj
26
vulnerability VCID-knq3-w2wm-4uae
27
vulnerability VCID-mw23-ujhz-a7cs
28
vulnerability VCID-nb8f-hdtw-9fdk
29
vulnerability VCID-nqwc-36ke-b3ff
30
vulnerability VCID-pjw9-sxen-b3cu
31
vulnerability VCID-pmr8-6zz1-ryf2
32
vulnerability VCID-pr67-cm26-w7hm
33
vulnerability VCID-q9p6-sxpv-g7gp
34
vulnerability VCID-sd6f-umkv-ffc2
35
vulnerability VCID-sgb7-h4sp-dbgf
36
vulnerability VCID-t9vy-6y7q-e3ac
37
vulnerability VCID-ubk6-8mnk-bqet
38
vulnerability VCID-y65y-kv8s-q3ef
39
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.1.1
aliases CVE-2012-0393, GHSA-hxqq-w4mr-mc62
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4vrt-hdq4-7kc6
5
url VCID-5h58-smn3-gkh7
vulnerability_id VCID-5h58-smn3-gkh7
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-3923
reference_id
reference_type
scores
0
value 0.91054
scoring_system epss
scoring_elements 0.99656
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-3923
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3923
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3923
2
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/72585
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/72585
3
reference_url http://struts.apache.org/development/2.x/docs/s2-009.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/development/2.x/docs/s2-009.html
4
reference_url http://struts.apache.org/docs/s2-009.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-009.html
5
reference_url https://web.archive.org/web/20140725074137/http://seclists.org/fulldisclosure/2014/Jul/38
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140725074137/http://seclists.org/fulldisclosure/2014/Jul/38
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-3923
reference_id CVE-2011-3923
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-3923
7
reference_url https://security-tracker.debian.org/tracker/CVE-2011-3923
reference_id CVE-2011-3923
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security-tracker.debian.org/tracker/CVE-2011-3923
8
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/24874.rb
reference_id CVE-2011-3923;OSVDB-78501
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/24874.rb
9
reference_url http://blog.o0o.nu/2012/01/cve-2011-3923-yet-another-struts2.html
reference_id CVE-2011-3923-YET-ANOTHER-STRUTS2.HTML
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://blog.o0o.nu/2012/01/cve-2011-3923-yet-another-struts2.html
10
reference_url https://github.com/advisories/GHSA-j68f-8h6p-9h5q
reference_id GHSA-j68f-8h6p-9h5q
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j68f-8h6p-9h5q
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.1.2
purl pkg:maven/org.apache.struts/struts2-core@2.3.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-6b94-6fkt-afdu
6
vulnerability VCID-6f4g-r6bc-63fg
7
vulnerability VCID-86yh-tym8-f3hh
8
vulnerability VCID-8huk-86a6-27cw
9
vulnerability VCID-8zze-44sk-audx
10
vulnerability VCID-aaet-jdfc-mbek
11
vulnerability VCID-c5xy-yhrn-fqf2
12
vulnerability VCID-ce3p-yaze-v7fy
13
vulnerability VCID-dzkb-wjvw-qufb
14
vulnerability VCID-ee2d-r8vy-skhq
15
vulnerability VCID-es18-pf68-h3de
16
vulnerability VCID-ev69-3d1j-nuac
17
vulnerability VCID-f4kx-q41m-5qer
18
vulnerability VCID-fmf4-k1py-g7fh
19
vulnerability VCID-gbqn-ywy3-d7cu
20
vulnerability VCID-hkhz-8ee5-57fm
21
vulnerability VCID-hszd-513t-xucj
22
vulnerability VCID-huug-6mey-9fgz
23
vulnerability VCID-jyrs-6kjh-3qfa
24
vulnerability VCID-k6eu-y8xc-5kbj
25
vulnerability VCID-knq3-w2wm-4uae
26
vulnerability VCID-mw23-ujhz-a7cs
27
vulnerability VCID-nb8f-hdtw-9fdk
28
vulnerability VCID-nqwc-36ke-b3ff
29
vulnerability VCID-pjw9-sxen-b3cu
30
vulnerability VCID-pmr8-6zz1-ryf2
31
vulnerability VCID-pr67-cm26-w7hm
32
vulnerability VCID-q9p6-sxpv-g7gp
33
vulnerability VCID-sd6f-umkv-ffc2
34
vulnerability VCID-sgb7-h4sp-dbgf
35
vulnerability VCID-t9vy-6y7q-e3ac
36
vulnerability VCID-ubk6-8mnk-bqet
37
vulnerability VCID-y65y-kv8s-q3ef
38
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.1.2
aliases CVE-2011-3923, GHSA-j68f-8h6p-9h5q
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5h58-smn3-gkh7
6
url VCID-6b94-6fkt-afdu
vulnerability_id VCID-6b94-6fkt-afdu
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1966
reference_id
reference_type
scores
0
value 0.91096
scoring_system epss
scoring_elements 0.9966
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1966
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=967656
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=967656
2
reference_url https://cwiki.apache.org/confluence/display/WW/S2-013
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/S2-013
3
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
4
reference_url https://github.com/apache/struts/commit/7e6f641ebb142663cbd1653dc49bed725edf7f56
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/7e6f641ebb142663cbd1653dc49bed725edf7f56
5
reference_url http://struts.apache.org/development/2.x/docs/s2-013.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/development/2.x/docs/s2-013.html
6
reference_url http://struts.apache.org/docs/s2-013.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-013.html
7
reference_url http://struts.apache.org/docs/s2-014.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-014.html
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-1966
reference_id CVE-2013-1966
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-1966
9
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/25980.rb
reference_id CVE-2013-2115;OSVDB-93645;CVE-2013-1966
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/25980.rb
10
reference_url https://github.com/advisories/GHSA-737w-mh58-cxjp
reference_id GHSA-737w-mh58-cxjp
reference_type
scores
url https://github.com/advisories/GHSA-737w-mh58-cxjp
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.14.2
purl pkg:maven/org.apache.struts/struts2-core@2.3.14.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-86yh-tym8-f3hh
6
vulnerability VCID-8huk-86a6-27cw
7
vulnerability VCID-8zze-44sk-audx
8
vulnerability VCID-aaet-jdfc-mbek
9
vulnerability VCID-c5xy-yhrn-fqf2
10
vulnerability VCID-ce3p-yaze-v7fy
11
vulnerability VCID-dzkb-wjvw-qufb
12
vulnerability VCID-ee2d-r8vy-skhq
13
vulnerability VCID-es18-pf68-h3de
14
vulnerability VCID-ev69-3d1j-nuac
15
vulnerability VCID-f4kx-q41m-5qer
16
vulnerability VCID-fmf4-k1py-g7fh
17
vulnerability VCID-gbqn-ywy3-d7cu
18
vulnerability VCID-hszd-513t-xucj
19
vulnerability VCID-huug-6mey-9fgz
20
vulnerability VCID-jyrs-6kjh-3qfa
21
vulnerability VCID-k6eu-y8xc-5kbj
22
vulnerability VCID-knq3-w2wm-4uae
23
vulnerability VCID-mw23-ujhz-a7cs
24
vulnerability VCID-n7x9-wj56-a7gr
25
vulnerability VCID-nb8f-hdtw-9fdk
26
vulnerability VCID-nqwc-36ke-b3ff
27
vulnerability VCID-pjw9-sxen-b3cu
28
vulnerability VCID-pmr8-6zz1-ryf2
29
vulnerability VCID-q9p6-sxpv-g7gp
30
vulnerability VCID-sd6f-umkv-ffc2
31
vulnerability VCID-sgb7-h4sp-dbgf
32
vulnerability VCID-t9vy-6y7q-e3ac
33
vulnerability VCID-ubk6-8mnk-bqet
34
vulnerability VCID-y65y-kv8s-q3ef
35
vulnerability VCID-ycjb-zszd-4ufy
36
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.14.2
aliases CVE-2013-1966, GHSA-737w-mh58-cxjp
risk_score 1.6
exploitability 2.0
weighted_severity 0.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6b94-6fkt-afdu
7
url VCID-6f4g-r6bc-63fg
vulnerability_id VCID-6f4g-r6bc-63fg
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-4387
reference_id
reference_type
scores
0
value 0.07916
scoring_system epss
scoring_elements 0.92163
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-4387
1
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/78183
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/78183
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/commit/80e03182d66d9e6ab18f9a9a9b3c42725a1c89e9
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/80e03182d66d9e6ab18f9a9a9b3c42725a1c89e9
4
reference_url https://github.com/apache/struts/commit/87935af56a27235e9399308ee1fcfb74f8edcefa
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/87935af56a27235e9399308ee1fcfb74f8edcefa
5
reference_url https://issues.apache.org/jira/browse/WW-3860
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-3860
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-4387
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-4387
7
reference_url http://struts.apache.org/2.x/docs/s2-011.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.x/docs/s2-011.html
8
reference_url http://struts.apache.org/docs/s2-011.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-011.html
9
reference_url http://www.openwall.com/lists/oss-security/2012/09/01/4
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2012/09/01/4
10
reference_url http://www.openwall.com/lists/oss-security/2012/09/01/5
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2012/09/01/5
11
reference_url https://github.com/advisories/GHSA-hrgc-54mv-58gv
reference_id GHSA-hrgc-54mv-58gv
reference_type
scores
url https://github.com/advisories/GHSA-hrgc-54mv-58gv
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.4.1
purl pkg:maven/org.apache.struts/struts2-core@2.3.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-6b94-6fkt-afdu
6
vulnerability VCID-86yh-tym8-f3hh
7
vulnerability VCID-8huk-86a6-27cw
8
vulnerability VCID-8zze-44sk-audx
9
vulnerability VCID-aaet-jdfc-mbek
10
vulnerability VCID-c5xy-yhrn-fqf2
11
vulnerability VCID-ce3p-yaze-v7fy
12
vulnerability VCID-dzkb-wjvw-qufb
13
vulnerability VCID-ee2d-r8vy-skhq
14
vulnerability VCID-es18-pf68-h3de
15
vulnerability VCID-ev69-3d1j-nuac
16
vulnerability VCID-f4kx-q41m-5qer
17
vulnerability VCID-fmf4-k1py-g7fh
18
vulnerability VCID-gbqn-ywy3-d7cu
19
vulnerability VCID-hkhz-8ee5-57fm
20
vulnerability VCID-hszd-513t-xucj
21
vulnerability VCID-huug-6mey-9fgz
22
vulnerability VCID-jyrs-6kjh-3qfa
23
vulnerability VCID-k6eu-y8xc-5kbj
24
vulnerability VCID-knq3-w2wm-4uae
25
vulnerability VCID-mw23-ujhz-a7cs
26
vulnerability VCID-nb8f-hdtw-9fdk
27
vulnerability VCID-nqwc-36ke-b3ff
28
vulnerability VCID-pjw9-sxen-b3cu
29
vulnerability VCID-pmr8-6zz1-ryf2
30
vulnerability VCID-q9p6-sxpv-g7gp
31
vulnerability VCID-sd6f-umkv-ffc2
32
vulnerability VCID-sgb7-h4sp-dbgf
33
vulnerability VCID-t9vy-6y7q-e3ac
34
vulnerability VCID-ubk6-8mnk-bqet
35
vulnerability VCID-y65y-kv8s-q3ef
36
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.4.1
aliases CVE-2012-4387, GHSA-hrgc-54mv-58gv
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6f4g-r6bc-63fg
8
url VCID-7pys-7ux7-fkfa
vulnerability_id VCID-7pys-7ux7-fkfa
summary 
XWork ParameterInterceptors bypass allows remote command execution
The OGNL extensive expression evaluation capability in this package as used in Atlassian Fisheye, Crucible, and possibly other products, uses a permissive allowlist, which allows remote attackers to modify server-side context objects and bypass the "#" protection mechanism in ParameterInterceptors via the `#context`, `#_memberAccess`, `#root`, `#this`, `#_typeResolver`, `#_classResolver`, `#_traceEvaluations`, `#_lastEvaluation`, `#_keepLastEvaluation`, and possibly other OGNL context variables, a different vulnerability than CVE-2008-6504.
references
0
reference_url http://confluence.atlassian.com/display/FISHEYE/FishEye+Security+Advisory+2010-06-16
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://confluence.atlassian.com/display/FISHEYE/FishEye+Security+Advisory+2010-06-16
1
reference_url http://packetstormsecurity.com/files/159643/LISTSERV-Maestro-9.0-8-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/159643/LISTSERV-Maestro-9.0-8-Remote-Code-Execution.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-1870
reference_id
reference_type
scores
0
value 0.92533
scoring_system epss
scoring_elements 0.99749
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-1870
3
reference_url https://cwiki.apache.org/confluence/display/WW/S2-003
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/S2-003
4
reference_url http://seclists.org/fulldisclosure/2010/Jul/183
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2010/Jul/183
5
reference_url http://seclists.org/fulldisclosure/2020/Oct/23
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2020/Oct/23
6
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
7
reference_url http://struts.apache.org/2.2.1/docs/s2-005.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.2.1/docs/s2-005.html
8
reference_url http://struts.apache.org/docs/s2-005.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-005.html
9
reference_url http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140709-struts2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140709-struts2
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2010-1870
reference_id CVE-2010-1870
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2010-1870
11
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/14360.txt
reference_id CVE-2010-1870;OSVDB-66280
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/14360.txt
12
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/17691.rb
reference_id CVE-2010-1870;OSVDB-66280
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/17691.rb
13
reference_url http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html
reference_id CVE-2010-1870-STRUTS2XWORK-REMOTE.HTML
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://blog.o0o.nu/2010/07/cve-2010-1870-struts2xwork-remote.html
14
reference_url https://github.com/advisories/GHSA-x5fc-pgpx-59j5
reference_id GHSA-x5fc-pgpx-59j5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x5fc-pgpx-59j5
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.2.1
purl pkg:maven/org.apache.struts/struts2-core@2.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-4vrt-hdq4-7kc6
6
vulnerability VCID-5h58-smn3-gkh7
7
vulnerability VCID-6b94-6fkt-afdu
8
vulnerability VCID-6f4g-r6bc-63fg
9
vulnerability VCID-8huk-86a6-27cw
10
vulnerability VCID-8zze-44sk-audx
11
vulnerability VCID-c5xy-yhrn-fqf2
12
vulnerability VCID-ce3p-yaze-v7fy
13
vulnerability VCID-dzkb-wjvw-qufb
14
vulnerability VCID-ee2d-r8vy-skhq
15
vulnerability VCID-es18-pf68-h3de
16
vulnerability VCID-ev69-3d1j-nuac
17
vulnerability VCID-f4kx-q41m-5qer
18
vulnerability VCID-fmf4-k1py-g7fh
19
vulnerability VCID-gbqn-ywy3-d7cu
20
vulnerability VCID-hkhz-8ee5-57fm
21
vulnerability VCID-hszd-513t-xucj
22
vulnerability VCID-huug-6mey-9fgz
23
vulnerability VCID-jyrs-6kjh-3qfa
24
vulnerability VCID-k6eu-y8xc-5kbj
25
vulnerability VCID-knq3-w2wm-4uae
26
vulnerability VCID-mfq8-9cbx-qkau
27
vulnerability VCID-mw23-ujhz-a7cs
28
vulnerability VCID-nb8f-hdtw-9fdk
29
vulnerability VCID-nqwc-36ke-b3ff
30
vulnerability VCID-pjw9-sxen-b3cu
31
vulnerability VCID-pmr8-6zz1-ryf2
32
vulnerability VCID-pr67-cm26-w7hm
33
vulnerability VCID-q9p6-sxpv-g7gp
34
vulnerability VCID-sd6f-umkv-ffc2
35
vulnerability VCID-sgb7-h4sp-dbgf
36
vulnerability VCID-t9vy-6y7q-e3ac
37
vulnerability VCID-ubk6-8mnk-bqet
38
vulnerability VCID-x851-jd32-vbgb
39
vulnerability VCID-y65y-kv8s-q3ef
40
vulnerability VCID-y6zz-57nn-ubd1
41
vulnerability VCID-ytqw-ezfq-n7fz
42
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.2.1
aliases CVE-2010-1870, GHSA-x5fc-pgpx-59j5
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7pys-7ux7-fkfa
9
url VCID-8huk-86a6-27cw
vulnerability_id VCID-8huk-86a6-27cw
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-3093
reference_id
reference_type
scores
0
value 0.05068
scoring_system epss
scoring_elements 0.89938
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-3093
1
reference_url https://github.com/jkuhnert/ognl/commit/ae43073fbf38db8371ff4f8bf2a966ee3b5f7e92
reference_id
reference_type
scores
url https://github.com/jkuhnert/ognl/commit/ae43073fbf38db8371ff4f8bf2a966ee3b5f7e92
2
reference_url https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef@%3Cdev.struts.apache.org%3E
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef@%3Cdev.struts.apache.org%3E
3
reference_url https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef%40%3Cdev.struts.apache.org%3E
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/940b4c3fef002461b89a050935337056d4a036a65ef68e0bbd4621ef%40%3Cdev.struts.apache.org%3E
4
reference_url https://struts.apache.org/docs/s2-034.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://struts.apache.org/docs/s2-034.html
5
reference_url http://struts.apache.org/docs/s2-034.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-034.html
6
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21987854
reference_id
reference_type
scores
url http://www-01.ibm.com/support/docview.wss?uid=swg21987854
7
reference_url http://www.securityfocus.com/bid/90961
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/90961
8
reference_url http://www.securitytracker.com/id/1036018
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1036018
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-3093
reference_id CVE-2016-3093
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-3093
10
reference_url https://github.com/advisories/GHSA-383p-xqxx-rrmp
reference_id GHSA-383p-xqxx-rrmp
reference_type
scores
url https://github.com/advisories/GHSA-383p-xqxx-rrmp
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.24.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.24.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2qup-v76d-8bge
2
vulnerability VCID-3q92-5sz9-2kd3
3
vulnerability VCID-86yh-tym8-f3hh
4
vulnerability VCID-aaet-jdfc-mbek
5
vulnerability VCID-ce3p-yaze-v7fy
6
vulnerability VCID-d7b9-rv1g-qkfp
7
vulnerability VCID-ee2d-r8vy-skhq
8
vulnerability VCID-f4kx-q41m-5qer
9
vulnerability VCID-fmf4-k1py-g7fh
10
vulnerability VCID-hszd-513t-xucj
11
vulnerability VCID-jyrs-6kjh-3qfa
12
vulnerability VCID-n7x9-wj56-a7gr
13
vulnerability VCID-nb8f-hdtw-9fdk
14
vulnerability VCID-pjw9-sxen-b3cu
15
vulnerability VCID-q9p6-sxpv-g7gp
16
vulnerability VCID-t9vy-6y7q-e3ac
17
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.24.3
aliases CVE-2016-3093, GHSA-383p-xqxx-rrmp
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8huk-86a6-27cw
10
url VCID-8zze-44sk-audx
vulnerability_id VCID-8zze-44sk-audx
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-3082
reference_id
reference_type
scores
0
value 0.24626
scoring_system epss
scoring_elements 0.96227
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-3082
1
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
2
reference_url https://github.com/apache/struts/commit/6bd694b7980494c12d49ca1bf39f12aec3e03e2f
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/6bd694b7980494c12d49ca1bf39f12aec3e03e2f
3
reference_url http://struts.apache.org/docs/s2-031.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/docs/s2-031.html
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-3082
reference_id CVE-2016-3082
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-3082
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.20.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.20.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-aaet-jdfc-mbek
7
vulnerability VCID-ce3p-yaze-v7fy
8
vulnerability VCID-d7b9-rv1g-qkfp
9
vulnerability VCID-ee2d-r8vy-skhq
10
vulnerability VCID-ev69-3d1j-nuac
11
vulnerability VCID-fmf4-k1py-g7fh
12
vulnerability VCID-hszd-513t-xucj
13
vulnerability VCID-jyrs-6kjh-3qfa
14
vulnerability VCID-nb8f-hdtw-9fdk
15
vulnerability VCID-pjw9-sxen-b3cu
16
vulnerability VCID-q9p6-sxpv-g7gp
17
vulnerability VCID-t9vy-6y7q-e3ac
18
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.20.3
1
url pkg:maven/org.apache.struts/struts2-core@2.3.24.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.24.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2qup-v76d-8bge
2
vulnerability VCID-3q92-5sz9-2kd3
3
vulnerability VCID-86yh-tym8-f3hh
4
vulnerability VCID-aaet-jdfc-mbek
5
vulnerability VCID-ce3p-yaze-v7fy
6
vulnerability VCID-d7b9-rv1g-qkfp
7
vulnerability VCID-ee2d-r8vy-skhq
8
vulnerability VCID-f4kx-q41m-5qer
9
vulnerability VCID-fmf4-k1py-g7fh
10
vulnerability VCID-hszd-513t-xucj
11
vulnerability VCID-jyrs-6kjh-3qfa
12
vulnerability VCID-n7x9-wj56-a7gr
13
vulnerability VCID-nb8f-hdtw-9fdk
14
vulnerability VCID-pjw9-sxen-b3cu
15
vulnerability VCID-q9p6-sxpv-g7gp
16
vulnerability VCID-t9vy-6y7q-e3ac
17
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.24.3
2
url pkg:maven/org.apache.struts/struts2-core@2.3.28.1
purl pkg:maven/org.apache.struts/struts2-core@2.3.28.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2qup-v76d-8bge
2
vulnerability VCID-3q92-5sz9-2kd3
3
vulnerability VCID-86yh-tym8-f3hh
4
vulnerability VCID-aaet-jdfc-mbek
5
vulnerability VCID-ce3p-yaze-v7fy
6
vulnerability VCID-d7b9-rv1g-qkfp
7
vulnerability VCID-f4kx-q41m-5qer
8
vulnerability VCID-fmf4-k1py-g7fh
9
vulnerability VCID-hszd-513t-xucj
10
vulnerability VCID-jyrs-6kjh-3qfa
11
vulnerability VCID-n7x9-wj56-a7gr
12
vulnerability VCID-nb8f-hdtw-9fdk
13
vulnerability VCID-q9p6-sxpv-g7gp
14
vulnerability VCID-t9vy-6y7q-e3ac
15
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.28.1
aliases CVE-2016-3082, GHSA-pvm9-288c-v5wq
risk_score 0.1
exploitability 0.5
weighted_severity 0.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8zze-44sk-audx
11
url VCID-c5xy-yhrn-fqf2
vulnerability_id VCID-c5xy-yhrn-fqf2
summary 
Cross-Site Scripting vulnerability on "Problem Report" screen
When Debug mode is turned on, under certain conditions an arbitrary script may be executed in the `Problem Report` screen. Also if JSP files are exposed to be accessed directly it's possible to execute an arbitrary script.
references
0
reference_url http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000125.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000125.html
1
reference_url http://jvn.jp/en/jp/JVN95989300/index.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN95989300/index.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5169
reference_id
reference_type
scores
0
value 0.01198
scoring_system epss
scoring_elements 0.79199
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5169
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1260087
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1260087
4
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-5169
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-5169
6
reference_url https://security.netapp.com/advisory/ntap-20180629-0003
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20180629-0003
7
reference_url https://struts.apache.org/docs/s2-025.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://struts.apache.org/docs/s2-025.html
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.20
purl pkg:maven/org.apache.struts/struts2-core@2.3.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-ce3p-yaze-v7fy
9
vulnerability VCID-d7b9-rv1g-qkfp
10
vulnerability VCID-ee2d-r8vy-skhq
11
vulnerability VCID-ev69-3d1j-nuac
12
vulnerability VCID-f4kx-q41m-5qer
13
vulnerability VCID-fdat-drnp-yudv
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-h3mw-239q-cbgn
16
vulnerability VCID-hszd-513t-xucj
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-n7x9-wj56-a7gr
19
vulnerability VCID-nb8f-hdtw-9fdk
20
vulnerability VCID-pjw9-sxen-b3cu
21
vulnerability VCID-q9p6-sxpv-g7gp
22
vulnerability VCID-t9vy-6y7q-e3ac
23
vulnerability VCID-vurd-7tee-e7a9
24
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.20
aliases CVE-2015-5169, GHSA-vwhv-j36g-5rm8
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c5xy-yhrn-fqf2
12
url VCID-ce3p-yaze-v7fy
vulnerability_id VCID-ce3p-yaze-v7fy
summary 
Remote code execution in Apache Struts
Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.
references
0
reference_url http://jvn.jp/en/jp/JVN43969166/index.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url http://jvn.jp/en/jp/JVN43969166/index.html
1
reference_url http://packetstormsecurity.com/files/160721/Apache-Struts-2-Forced-Multi-OGNL-Evaluation.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url http://packetstormsecurity.com/files/160721/Apache-Struts-2-Forced-Multi-OGNL-Evaluation.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-17530
reference_id
reference_type
scores
0
value 0.94373
scoring_system epss
scoring_elements 0.99967
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-17530
3
reference_url https://cwiki.apache.org/confluence/display/WW/S2-061
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url https://cwiki.apache.org/confluence/display/WW/S2-061
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
6
reference_url https://security.netapp.com/advisory/ntap-20210115-0005
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20210115-0005
7
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-17530
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-17530
8
reference_url https://www.oracle.com/security-alerts/cpuApr2021.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url https://www.oracle.com/security-alerts/cpuApr2021.html
9
reference_url https://www.oracle.com/security-alerts/cpuapr2022.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url https://www.oracle.com/security-alerts/cpuapr2022.html
10
reference_url https://www.oracle.com/security-alerts/cpujan2021.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url https://www.oracle.com/security-alerts/cpujan2021.html
11
reference_url https://www.oracle.com/security-alerts/cpujan2022.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url https://www.oracle.com/security-alerts/cpujan2022.html
12
reference_url https://www.oracle.com//security-alerts/cpujul2021.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url https://www.oracle.com//security-alerts/cpujul2021.html
13
reference_url https://www.oracle.com/security-alerts/cpuoct2021.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url https://www.oracle.com/security-alerts/cpuoct2021.html
14
reference_url http://www.openwall.com/lists/oss-security/2022/04/12/6
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url http://www.openwall.com/lists/oss-security/2022/04/12/6
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-17530
reference_id CVE-2020-17530
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-17530
16
reference_url https://github.com/advisories/GHSA-jc35-q369-45pv
reference_id GHSA-jc35-q369-45pv
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jc35-q369-45pv
17
reference_url https://security.netapp.com/advisory/ntap-20210115-0005/
reference_id ntap-20210115-0005
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-06T20:53:17Z/
url https://security.netapp.com/advisory/ntap-20210115-0005/
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.5.26
purl pkg:maven/org.apache.struts/struts2-core@2.5.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jyrs-6kjh-3qfa
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.26
aliases CVE-2020-17530, GHSA-jc35-q369-45pv
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ce3p-yaze-v7fy
13
url VCID-dhnk-x3gc-z7hs
vulnerability_id VCID-dhnk-x3gc-z7hs
summary
references
0
reference_url http://issues.apache.org/struts/browse/WW-2779
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://issues.apache.org/struts/browse/WW-2779
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-6505
reference_id
reference_type
scores
0
value 0.83102
scoring_system epss
scoring_elements 0.99277
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-6505
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/commit/04fcefa44bae1263c7cad6986a9dafed67f0164f
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/04fcefa44bae1263c7cad6986a9dafed67f0164f
4
reference_url https://github.com/apache/struts/commit/1f1c996eb1f0f3e2193fba0075f62ccd04e3c0c3
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/1f1c996eb1f0f3e2193fba0075f62ccd04e3c0c3
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2008-6505
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2008-6505
6
reference_url http://struts.apache.org/2.x/docs/s2-004.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.x/docs/s2-004.html
7
reference_url https://web.archive.org/web/20081208214512/http://secunia.com/advisories/32497
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20081208214512/http://secunia.com/advisories/32497
8
reference_url https://web.archive.org/web/20111025094319/http://www.securityfocus.com/bid/32104
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20111025094319/http://www.securityfocus.com/bid/32104
9
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32565.txt
reference_id CVE-2008-6505;OSVDB-49734
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32565.txt
10
reference_url https://www.securityfocus.com/bid/32104/info
reference_id CVE-2008-6505;OSVDB-49734
reference_type exploit
scores
url https://www.securityfocus.com/bid/32104/info
11
reference_url https://github.com/advisories/GHSA-wv7g-xhvw-8hcp
reference_id GHSA-wv7g-xhvw-8hcp
reference_type
scores
url https://github.com/advisories/GHSA-wv7g-xhvw-8hcp
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.0.12
purl pkg:maven/org.apache.struts/struts2-core@2.0.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-4vrt-hdq4-7kc6
5
vulnerability VCID-5h58-smn3-gkh7
6
vulnerability VCID-6b94-6fkt-afdu
7
vulnerability VCID-6f4g-r6bc-63fg
8
vulnerability VCID-7pys-7ux7-fkfa
9
vulnerability VCID-8huk-86a6-27cw
10
vulnerability VCID-8zze-44sk-audx
11
vulnerability VCID-c5xy-yhrn-fqf2
12
vulnerability VCID-ce3p-yaze-v7fy
13
vulnerability VCID-dzkb-wjvw-qufb
14
vulnerability VCID-ee2d-r8vy-skhq
15
vulnerability VCID-es18-pf68-h3de
16
vulnerability VCID-ev69-3d1j-nuac
17
vulnerability VCID-f4kx-q41m-5qer
18
vulnerability VCID-fmf4-k1py-g7fh
19
vulnerability VCID-gbqn-ywy3-d7cu
20
vulnerability VCID-hkhz-8ee5-57fm
21
vulnerability VCID-hszd-513t-xucj
22
vulnerability VCID-huug-6mey-9fgz
23
vulnerability VCID-jyrs-6kjh-3qfa
24
vulnerability VCID-k6eu-y8xc-5kbj
25
vulnerability VCID-knq3-w2wm-4uae
26
vulnerability VCID-mfq8-9cbx-qkau
27
vulnerability VCID-mw23-ujhz-a7cs
28
vulnerability VCID-nb8f-hdtw-9fdk
29
vulnerability VCID-nqwc-36ke-b3ff
30
vulnerability VCID-pjw9-sxen-b3cu
31
vulnerability VCID-pmr8-6zz1-ryf2
32
vulnerability VCID-pr67-cm26-w7hm
33
vulnerability VCID-q9p6-sxpv-g7gp
34
vulnerability VCID-sd6f-umkv-ffc2
35
vulnerability VCID-sgb7-h4sp-dbgf
36
vulnerability VCID-t9vy-6y7q-e3ac
37
vulnerability VCID-ubk6-8mnk-bqet
38
vulnerability VCID-x851-jd32-vbgb
39
vulnerability VCID-y65y-kv8s-q3ef
40
vulnerability VCID-y6zz-57nn-ubd1
41
vulnerability VCID-ytqw-ezfq-n7fz
42
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.0.12
1
url pkg:maven/org.apache.struts/struts2-core@2.1.3
purl pkg:maven/org.apache.struts/struts2-core@2.1.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.1.3
2
url pkg:maven/org.apache.struts/struts2-core@2.1.6
purl pkg:maven/org.apache.struts/struts2-core@2.1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-4vrt-hdq4-7kc6
6
vulnerability VCID-5h58-smn3-gkh7
7
vulnerability VCID-6b94-6fkt-afdu
8
vulnerability VCID-6f4g-r6bc-63fg
9
vulnerability VCID-7pys-7ux7-fkfa
10
vulnerability VCID-8huk-86a6-27cw
11
vulnerability VCID-8zze-44sk-audx
12
vulnerability VCID-c5xy-yhrn-fqf2
13
vulnerability VCID-ce3p-yaze-v7fy
14
vulnerability VCID-dzkb-wjvw-qufb
15
vulnerability VCID-ee2d-r8vy-skhq
16
vulnerability VCID-es18-pf68-h3de
17
vulnerability VCID-ev69-3d1j-nuac
18
vulnerability VCID-f4kx-q41m-5qer
19
vulnerability VCID-fmf4-k1py-g7fh
20
vulnerability VCID-gbqn-ywy3-d7cu
21
vulnerability VCID-hkhz-8ee5-57fm
22
vulnerability VCID-hszd-513t-xucj
23
vulnerability VCID-huug-6mey-9fgz
24
vulnerability VCID-jyrs-6kjh-3qfa
25
vulnerability VCID-k6eu-y8xc-5kbj
26
vulnerability VCID-knq3-w2wm-4uae
27
vulnerability VCID-mfq8-9cbx-qkau
28
vulnerability VCID-mw23-ujhz-a7cs
29
vulnerability VCID-nb8f-hdtw-9fdk
30
vulnerability VCID-nqwc-36ke-b3ff
31
vulnerability VCID-pjw9-sxen-b3cu
32
vulnerability VCID-pmr8-6zz1-ryf2
33
vulnerability VCID-pr67-cm26-w7hm
34
vulnerability VCID-q9p6-sxpv-g7gp
35
vulnerability VCID-sd6f-umkv-ffc2
36
vulnerability VCID-sgb7-h4sp-dbgf
37
vulnerability VCID-t9vy-6y7q-e3ac
38
vulnerability VCID-ubk6-8mnk-bqet
39
vulnerability VCID-x851-jd32-vbgb
40
vulnerability VCID-y65y-kv8s-q3ef
41
vulnerability VCID-y6zz-57nn-ubd1
42
vulnerability VCID-ytqw-ezfq-n7fz
43
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.1.6
aliases CVE-2008-6505, GHSA-wv7g-xhvw-8hcp
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dhnk-x3gc-z7hs
14
url VCID-dzkb-wjvw-qufb
vulnerability_id VCID-dzkb-wjvw-qufb
summary
references
0
reference_url http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000124.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000124.html
1
reference_url http://jvn.jp/en/jp/JVN88408929/index.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN88408929/index.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-2992
reference_id
reference_type
scores
0
value 0.00992
scoring_system epss
scoring_elements 0.77207
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-2992
3
reference_url https://cwiki.apache.org/confluence/display/WW/S2-025
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/S2-025
4
reference_url https://cwiki.apache.org/confluence/display/WW/Security
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/Security
5
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
6
reference_url https://security.netapp.com/advisory/ntap-20200330-0001
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20200330-0001
7
reference_url http://www.securityfocus.com/bid/76624
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/76624
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-2992
reference_id CVE-2015-2992
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-2992
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.20
purl pkg:maven/org.apache.struts/struts2-core@2.3.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-ce3p-yaze-v7fy
9
vulnerability VCID-d7b9-rv1g-qkfp
10
vulnerability VCID-ee2d-r8vy-skhq
11
vulnerability VCID-ev69-3d1j-nuac
12
vulnerability VCID-f4kx-q41m-5qer
13
vulnerability VCID-fdat-drnp-yudv
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-h3mw-239q-cbgn
16
vulnerability VCID-hszd-513t-xucj
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-n7x9-wj56-a7gr
19
vulnerability VCID-nb8f-hdtw-9fdk
20
vulnerability VCID-pjw9-sxen-b3cu
21
vulnerability VCID-q9p6-sxpv-g7gp
22
vulnerability VCID-t9vy-6y7q-e3ac
23
vulnerability VCID-vurd-7tee-e7a9
24
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.20
aliases CVE-2015-2992, GHSA-265r-pp83-gww7
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dzkb-wjvw-qufb
15
url VCID-ee2d-r8vy-skhq
vulnerability_id VCID-ee2d-r8vy-skhq
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-2162
reference_id
reference_type
scores
0
value 0.01235
scoring_system epss
scoring_elements 0.79528
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-2162
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/blob/f511034acd7b97e07d281169b38e2af40c94903d/core/src/main/java/org/apache/struts2/interceptor/I18nInterceptor.java
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/blob/f511034acd7b97e07d281169b38e2af40c94903d/core/src/main/java/org/apache/struts2/interceptor/I18nInterceptor.java
4
reference_url https://github.com/apache/struts/commit/fc2179cf1ac9fbfb61e3430fa88b641d87253327
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/fc2179cf1ac9fbfb61e3430fa88b641d87253327
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-2162
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-2162
6
reference_url http://struts.apache.org/docs/s2-030.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/docs/s2-030.html
7
reference_url https://web.archive.org/web/20210123095722/http://www.securityfocus.com/bid/85070
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20210123095722/http://www.securityfocus.com/bid/85070
8
reference_url https://web.archive.org/web/20210801130539/http://www.securitytracker.com/id/1035272
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20210801130539/http://www.securitytracker.com/id/1035272
9
reference_url https://github.com/advisories/GHSA-2j4q-9fff-236j
reference_id GHSA-2j4q-9fff-236j
reference_type
scores
url https://github.com/advisories/GHSA-2j4q-9fff-236j
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.28
purl pkg:maven/org.apache.struts/struts2-core@2.3.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2qup-v76d-8bge
2
vulnerability VCID-3q92-5sz9-2kd3
3
vulnerability VCID-86yh-tym8-f3hh
4
vulnerability VCID-8zze-44sk-audx
5
vulnerability VCID-aaet-jdfc-mbek
6
vulnerability VCID-ce3p-yaze-v7fy
7
vulnerability VCID-d7b9-rv1g-qkfp
8
vulnerability VCID-f4kx-q41m-5qer
9
vulnerability VCID-fdat-drnp-yudv
10
vulnerability VCID-fmf4-k1py-g7fh
11
vulnerability VCID-hszd-513t-xucj
12
vulnerability VCID-jyrs-6kjh-3qfa
13
vulnerability VCID-n7x9-wj56-a7gr
14
vulnerability VCID-nb8f-hdtw-9fdk
15
vulnerability VCID-q9p6-sxpv-g7gp
16
vulnerability VCID-t9vy-6y7q-e3ac
17
vulnerability VCID-vurd-7tee-e7a9
18
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.28
aliases CVE-2016-2162, GHSA-2j4q-9fff-236j
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ee2d-r8vy-skhq
16
url VCID-es18-pf68-h3de
vulnerability_id VCID-es18-pf68-h3de
summary
references
0
reference_url http://archives.neohapsis.com/archives/bugtraq/2013-09/0107.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://archives.neohapsis.com/archives/bugtraq/2013-09/0107.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4316
reference_id
reference_type
scores
0
value 0.06168
scoring_system epss
scoring_elements 0.90973
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4316
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/commit/58947c3f85ae641c1a476316a2888e53605948d1
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/58947c3f85ae641c1a476316a2888e53605948d1
4
reference_url https://github.com/apache/struts/commit/c643336945dda84cbcdc8a39530baa24fede28c4
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/c643336945dda84cbcdc8a39530baa24fede28c4
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-4316
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-4316
6
reference_url http://struts.apache.org/docs/s2-019.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-019.html
7
reference_url http://struts.apache.org/release/2.3.x/docs/s2-019.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/release/2.3.x/docs/s2-019.html
8
reference_url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4316
reference_id
reference_type
scores
url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4316
9
reference_url https://github.com/advisories/GHSA-j7h6-xr7g-m2c5
reference_id GHSA-j7h6-xr7g-m2c5
reference_type
scores
url https://github.com/advisories/GHSA-j7h6-xr7g-m2c5
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.15.2
purl pkg:maven/org.apache.struts/struts2-core@2.3.15.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-c5xy-yhrn-fqf2
9
vulnerability VCID-ce3p-yaze-v7fy
10
vulnerability VCID-dzkb-wjvw-qufb
11
vulnerability VCID-ee2d-r8vy-skhq
12
vulnerability VCID-ev69-3d1j-nuac
13
vulnerability VCID-f4kx-q41m-5qer
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-hszd-513t-xucj
16
vulnerability VCID-huug-6mey-9fgz
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-k6eu-y8xc-5kbj
19
vulnerability VCID-knq3-w2wm-4uae
20
vulnerability VCID-n7x9-wj56-a7gr
21
vulnerability VCID-nb8f-hdtw-9fdk
22
vulnerability VCID-nqwc-36ke-b3ff
23
vulnerability VCID-pjw9-sxen-b3cu
24
vulnerability VCID-q9p6-sxpv-g7gp
25
vulnerability VCID-sd6f-umkv-ffc2
26
vulnerability VCID-t9vy-6y7q-e3ac
27
vulnerability VCID-ubk6-8mnk-bqet
28
vulnerability VCID-y65y-kv8s-q3ef
29
vulnerability VCID-ycjb-zszd-4ufy
30
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.15.2
aliases CVE-2013-4316, GHSA-j7h6-xr7g-m2c5
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-es18-pf68-h3de
17
url VCID-ev69-3d1j-nuac
vulnerability_id VCID-ev69-3d1j-nuac
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4003
reference_id
reference_type
scores
0
value 0.02629
scoring_system epss
scoring_elements 0.85946
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4003
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/commit/4720f46a63caaf9db97ba27dc51ac5ad21e66bdc
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/4720f46a63caaf9db97ba27dc51ac5ad21e66bdc
4
reference_url https://github.com/apache/struts/commit/5421930b49822606792f36653b17d3d95ef106f9
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/5421930b49822606792f36653b17d3d95ef106f9
5
reference_url https://github.com/apache/struts/commit/72471d7075681bea52046645ad7aa34e9c53751e
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/72471d7075681bea52046645ad7aa34e9c53751e
6
reference_url https://github.com/apache/struts/commit/76f188406eb9f17a06afcb5f49f0c44d749da0d2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/76f188406eb9f17a06afcb5f49f0c44d749da0d2
7
reference_url https://github.com/apache/struts/commit/a89bbe22cd2461748d595a89a254de888a415e6c
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/a89bbe22cd2461748d595a89a254de888a415e6c
8
reference_url https://issues.apache.org/jira/browse/WW-4507
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4507
9
reference_url http://struts.apache.org/docs/s2-028.html
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/docs/s2-028.html
10
reference_url https://web.archive.org/web/20161119142317/http://www.securityfocus.com/bid/86311
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20161119142317/http://www.securityfocus.com/bid/86311
11
reference_url https://web.archive.org/web/20161221184936/http://www.securitytracker.com/id/1035268
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20161221184936/http://www.securitytracker.com/id/1035268
12
reference_url http://www.securityfocus.com/bid/86311
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/86311
13
reference_url http://www.securitytracker.com/id/1035268
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1035268
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-4003
reference_id CVE-2016-4003
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-4003
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.24.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.24.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2qup-v76d-8bge
2
vulnerability VCID-3q92-5sz9-2kd3
3
vulnerability VCID-86yh-tym8-f3hh
4
vulnerability VCID-aaet-jdfc-mbek
5
vulnerability VCID-ce3p-yaze-v7fy
6
vulnerability VCID-d7b9-rv1g-qkfp
7
vulnerability VCID-ee2d-r8vy-skhq
8
vulnerability VCID-f4kx-q41m-5qer
9
vulnerability VCID-fmf4-k1py-g7fh
10
vulnerability VCID-hszd-513t-xucj
11
vulnerability VCID-jyrs-6kjh-3qfa
12
vulnerability VCID-n7x9-wj56-a7gr
13
vulnerability VCID-nb8f-hdtw-9fdk
14
vulnerability VCID-pjw9-sxen-b3cu
15
vulnerability VCID-q9p6-sxpv-g7gp
16
vulnerability VCID-t9vy-6y7q-e3ac
17
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.24.3
1
url pkg:maven/org.apache.struts/struts2-core@2.3.28
purl pkg:maven/org.apache.struts/struts2-core@2.3.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2qup-v76d-8bge
2
vulnerability VCID-3q92-5sz9-2kd3
3
vulnerability VCID-86yh-tym8-f3hh
4
vulnerability VCID-8zze-44sk-audx
5
vulnerability VCID-aaet-jdfc-mbek
6
vulnerability VCID-ce3p-yaze-v7fy
7
vulnerability VCID-d7b9-rv1g-qkfp
8
vulnerability VCID-f4kx-q41m-5qer
9
vulnerability VCID-fdat-drnp-yudv
10
vulnerability VCID-fmf4-k1py-g7fh
11
vulnerability VCID-hszd-513t-xucj
12
vulnerability VCID-jyrs-6kjh-3qfa
13
vulnerability VCID-n7x9-wj56-a7gr
14
vulnerability VCID-nb8f-hdtw-9fdk
15
vulnerability VCID-q9p6-sxpv-g7gp
16
vulnerability VCID-t9vy-6y7q-e3ac
17
vulnerability VCID-vurd-7tee-e7a9
18
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.28
aliases CVE-2016-4003, GHSA-m3x6-9v6h-4g28
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ev69-3d1j-nuac
18
url VCID-f4kx-q41m-5qer
vulnerability_id VCID-f4kx-q41m-5qer
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-12611
reference_id
reference_type
scores
0
value 0.94228
scoring_system epss
scoring_elements 0.99929
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-12611
1
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
2
reference_url https://github.com/apache/struts/commit/2306f5f7fad7f0157f216f34331238feb0539fa
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/2306f5f7fad7f0157f216f34331238feb0539fa
3
reference_url https://github.com/apache/struts/commit/637ad1c3707266c33daabb18d7754e795e6681f
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/637ad1c3707266c33daabb18d7754e795e6681f
4
reference_url https://kb.netapp.com/support/s/article/ka51A000000CgttQAC/NTAP-20170911-0001
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://kb.netapp.com/support/s/article/ka51A000000CgttQAC/NTAP-20170911-0001
5
reference_url https://struts.apache.org/docs/s2-053.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://struts.apache.org/docs/s2-053.html
6
reference_url https://web.archive.org/web/20170923161654/http://www.securityfocus.com/bid/100829
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20170923161654/http://www.securityfocus.com/bid/100829
7
reference_url http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-003.txt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-003.txt
8
reference_url http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html
9
reference_url http://www.securityfocus.com/bid/100829
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/100829
10
reference_url https://github.com/brianwrf/S2-053-CVE-2017-12611/blob/a587bbdc79843fe44ad3fe0439d7add3f887bc31/exploit.py
reference_id CVE-2017-12611
reference_type exploit
scores
url https://github.com/brianwrf/S2-053-CVE-2017-12611/blob/a587bbdc79843fe44ad3fe0439d7add3f887bc31/exploit.py
11
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/44556.py
reference_id CVE-2017-12611
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/44556.py
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-12611
reference_id CVE-2017-12611
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-12611
13
reference_url https://github.com/advisories/GHSA-8fx9-5hx8-crhm
reference_id GHSA-8fx9-5hx8-crhm
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8fx9-5hx8-crhm
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.20.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.20.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-aaet-jdfc-mbek
7
vulnerability VCID-ce3p-yaze-v7fy
8
vulnerability VCID-d7b9-rv1g-qkfp
9
vulnerability VCID-ee2d-r8vy-skhq
10
vulnerability VCID-ev69-3d1j-nuac
11
vulnerability VCID-fmf4-k1py-g7fh
12
vulnerability VCID-hszd-513t-xucj
13
vulnerability VCID-jyrs-6kjh-3qfa
14
vulnerability VCID-nb8f-hdtw-9fdk
15
vulnerability VCID-pjw9-sxen-b3cu
16
vulnerability VCID-q9p6-sxpv-g7gp
17
vulnerability VCID-t9vy-6y7q-e3ac
18
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.20.3
1
url pkg:maven/org.apache.struts/struts2-core@2.3.34
purl pkg:maven/org.apache.struts/struts2-core@2.3.34
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-3q92-5sz9-2kd3
2
vulnerability VCID-ce3p-yaze-v7fy
3
vulnerability VCID-fmf4-k1py-g7fh
4
vulnerability VCID-jyrs-6kjh-3qfa
5
vulnerability VCID-nb8f-hdtw-9fdk
6
vulnerability VCID-t9vy-6y7q-e3ac
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.34
2
url pkg:maven/org.apache.struts/struts2-core@2.5.10.1
purl pkg:maven/org.apache.struts/struts2-core@2.5.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-3q92-5sz9-2kd3
2
vulnerability VCID-ce3p-yaze-v7fy
3
vulnerability VCID-f4kx-q41m-5qer
4
vulnerability VCID-fmf4-k1py-g7fh
5
vulnerability VCID-jyrs-6kjh-3qfa
6
vulnerability VCID-n7x9-wj56-a7gr
7
vulnerability VCID-nb8f-hdtw-9fdk
8
vulnerability VCID-t9vy-6y7q-e3ac
9
vulnerability VCID-tmm5-hrp4-r7hy
10
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.10.1
3
url pkg:maven/org.apache.struts/struts2-core@2.5.11
purl pkg:maven/org.apache.struts/struts2-core@2.5.11
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.11
4
url pkg:maven/org.apache.struts/struts2-core@2.5.12
purl pkg:maven/org.apache.struts/struts2-core@2.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-3q92-5sz9-2kd3
2
vulnerability VCID-ce3p-yaze-v7fy
3
vulnerability VCID-fmf4-k1py-g7fh
4
vulnerability VCID-jyrs-6kjh-3qfa
5
vulnerability VCID-n7x9-wj56-a7gr
6
vulnerability VCID-nb8f-hdtw-9fdk
7
vulnerability VCID-t9vy-6y7q-e3ac
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.12
aliases CVE-2017-12611, GHSA-8fx9-5hx8-crhm
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f4kx-q41m-5qer
19
url VCID-fmf4-k1py-g7fh
vulnerability_id VCID-fmf4-k1py-g7fh
summary 
Unrestricted Upload of File with Dangerous Type
A local code execution issue exists in Apache Struts2 when processing malformed XSLT files, which could let a malicious user upload and execute arbitrary files.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-1592
reference_id
reference_type
scores
0
value 0.00588
scoring_system epss
scoring_elements 0.69462
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-1592
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1592
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1592
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/blob/master/core/src/main/resources/struts-default.xml#L39-L76
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/blob/master/core/src/main/resources/struts-default.xml#L39-L76
4
reference_url https://issues.apache.org/jira/browse/WW-5055
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-5055
5
reference_url https://lists.apache.org/thread.html/r348ed455a140273c40b974f0615dee692f7c9b26c6de2118b4280ef2@%3Cissues.struts.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r348ed455a140273c40b974f0615dee692f7c9b26c6de2118b4280ef2@%3Cissues.struts.apache.org%3E
6
reference_url https://lists.apache.org/thread.html/r348ed455a140273c40b974f0615dee692f7c9b26c6de2118b4280ef2%40%3Cissues.struts.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r348ed455a140273c40b974f0615dee692f7c9b26c6de2118b4280ef2%40%3Cissues.struts.apache.org%3E
7
reference_url https://lists.apache.org/thread.html/r593ebb2f4c95b064e6901fd273eff256c493db952bdb484395948ffc@%3Cissues.struts.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r593ebb2f4c95b064e6901fd273eff256c493db952bdb484395948ffc@%3Cissues.struts.apache.org%3E
8
reference_url https://lists.apache.org/thread.html/r593ebb2f4c95b064e6901fd273eff256c493db952bdb484395948ffc%40%3Cissues.struts.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r593ebb2f4c95b064e6901fd273eff256c493db952bdb484395948ffc%40%3Cissues.struts.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/r93c4e3f6cb138cd117c739714f07e47af547183ba099ba46be2b2a5b@%3Cissues.struts.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r93c4e3f6cb138cd117c739714f07e47af547183ba099ba46be2b2a5b@%3Cissues.struts.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/r93c4e3f6cb138cd117c739714f07e47af547183ba099ba46be2b2a5b%40%3Cissues.struts.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r93c4e3f6cb138cd117c739714f07e47af547183ba099ba46be2b2a5b%40%3Cissues.struts.apache.org%3E
11
reference_url https://seclists.org/bugtraq/2012/Mar/110
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://seclists.org/bugtraq/2012/Mar/110
12
reference_url https://struts.apache.org/security/#internal-security-mechanism
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://struts.apache.org/security/#internal-security-mechanism
13
reference_url https://www.openwall.com/lists/oss-security/2012/03/28/12
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.openwall.com/lists/oss-security/2012/03/28/12
14
reference_url http://www.openwall.com/lists/oss-security/2012/03/28/12
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2012/03/28/12
15
reference_url https://access.redhat.com/security/cve/cve-2012-1592
reference_id CVE-2012-1592
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/cve-2012-1592
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-1592
reference_id CVE-2012-1592
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-1592
17
reference_url https://security-tracker.debian.org/tracker/CVE-2012-1592
reference_id CVE-2012-1592
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security-tracker.debian.org/tracker/CVE-2012-1592
18
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/webapps/37009.xml
reference_id CVE-2012-1592;OSVDB-80547
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/webapps/37009.xml
19
reference_url https://www.securityfocus.com/bid/52702/info
reference_id CVE-2012-1592;OSVDB-80547
reference_type exploit
scores
url https://www.securityfocus.com/bid/52702/info
20
reference_url https://github.com/advisories/GHSA-8m5q-crqq-6pmf
reference_id GHSA-8m5q-crqq-6pmf
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8m5q-crqq-6pmf
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.5.22
purl pkg:maven/org.apache.struts/struts2-core@2.5.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce3p-yaze-v7fy
1
vulnerability VCID-jyrs-6kjh-3qfa
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.22
aliases CVE-2012-1592, GHSA-8m5q-crqq-6pmf
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fmf4-k1py-g7fh
20
url VCID-gbqn-ywy3-d7cu
vulnerability_id VCID-gbqn-ywy3-d7cu
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2134
reference_id
reference_type
scores
0
value 0.90936
scoring_system epss
scoring_elements 0.99648
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2134
1
reference_url https://cwiki.apache.org/confluence/display/WW/S2-015
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/S2-015
2
reference_url http://security.gentoo.org/glsa/glsa-201409-04.xml
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://security.gentoo.org/glsa/glsa-201409-04.xml
3
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
4
reference_url https://github.com/apache/struts/commit/01e6b251b4db78bfb7971033652e81d1af4cb3e
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/01e6b251b4db78bfb7971033652e81d1af4cb3e
5
reference_url https://github.com/apache/struts/commit/01e6b251b4db78bfb7971033652e81d1af4cb3e0
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/01e6b251b4db78bfb7971033652e81d1af4cb3e0
6
reference_url https://github.com/apache/struts/commit/041206d2a693d02c0cb2e72765275e55ba14049f
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/041206d2a693d02c0cb2e72765275e55ba14049f
7
reference_url https://github.com/apache/struts/commit/113c47082c09818bcef65acc436a2d0c7c47aa6c
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/113c47082c09818bcef65acc436a2d0c7c47aa6c
8
reference_url https://github.com/apache/struts/commit/54e5c912ebd9a1599bfcf7a719da17c28127bbe
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/54e5c912ebd9a1599bfcf7a719da17c28127bbe
9
reference_url https://github.com/apache/struts/commit/54e5c912ebd9a1599bfcf7a719da17c28127bbe3
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/54e5c912ebd9a1599bfcf7a719da17c28127bbe3
10
reference_url https://github.com/apache/struts/commit/711cf0201cdd319a38cf29238913312355db29ba
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/711cf0201cdd319a38cf29238913312355db29ba
11
reference_url https://github.com/apache/struts/commit/8b4fc81daeea3834bcbf73de5f48d0021917aa3
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/8b4fc81daeea3834bcbf73de5f48d0021917aa3
12
reference_url https://github.com/apache/struts/commit/8b4fc81daeea3834bcbf73de5f48d0021917aa37
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/8b4fc81daeea3834bcbf73de5f48d0021917aa37
13
reference_url https://github.com/apache/struts/commit/cfb6e9afbae320a4dd5bdd655154ab9fe5a92c1
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/cfb6e9afbae320a4dd5bdd655154ab9fe5a92c1
14
reference_url https://github.com/apache/struts/commit/cfb6e9afbae320a4dd5bdd655154ab9fe5a92c16
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/cfb6e9afbae320a4dd5bdd655154ab9fe5a92c16
15
reference_url https://issues.apache.org/jira/browse/WW-4090
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4090
16
reference_url https://issues.apache.org/jira/browse/WW-4094
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4094
17
reference_url https://issues.apache.org/jira/browse/WW-4095
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4095
18
reference_url http://struts.apache.org/development/2.x/docs/s2-015.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/development/2.x/docs/s2-015.html
19
reference_url http://struts.apache.org/docs/s2-015.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-015.html
20
reference_url https://web.archive.org/web/20140226173351/http://www.securityfocus.com/bid/60346
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140226173351/http://www.securityfocus.com/bid/60346
21
reference_url https://web.archive.org/web/20140410223942/http://www.securityfocus.com/bid/64758
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140410223942/http://www.securityfocus.com/bid/64758
22
reference_url http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
23
reference_url http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
24
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-2134
reference_id CVE-2013-2134
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-2134
25
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/38549.txt
reference_id CVE-2013-2134;OSVDB-93969
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/38549.txt
26
reference_url https://www.securityfocus.com/bid/60345/info
reference_id CVE-2013-2134;OSVDB-93969
reference_type exploit
scores
url https://www.securityfocus.com/bid/60345/info
27
reference_url https://github.com/advisories/GHSA-gqqm-564f-vvxq
reference_id GHSA-gqqm-564f-vvxq
reference_type
scores
url https://github.com/advisories/GHSA-gqqm-564f-vvxq
28
reference_url https://security.gentoo.org/glsa/201409-04
reference_id GLSA-201409-04
reference_type
scores
url https://security.gentoo.org/glsa/201409-04
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.14.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.14.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-86yh-tym8-f3hh
6
vulnerability VCID-8huk-86a6-27cw
7
vulnerability VCID-8zze-44sk-audx
8
vulnerability VCID-aaet-jdfc-mbek
9
vulnerability VCID-c5xy-yhrn-fqf2
10
vulnerability VCID-ce3p-yaze-v7fy
11
vulnerability VCID-dzkb-wjvw-qufb
12
vulnerability VCID-ee2d-r8vy-skhq
13
vulnerability VCID-es18-pf68-h3de
14
vulnerability VCID-ev69-3d1j-nuac
15
vulnerability VCID-f4kx-q41m-5qer
16
vulnerability VCID-fmf4-k1py-g7fh
17
vulnerability VCID-hszd-513t-xucj
18
vulnerability VCID-huug-6mey-9fgz
19
vulnerability VCID-jyrs-6kjh-3qfa
20
vulnerability VCID-k6eu-y8xc-5kbj
21
vulnerability VCID-knq3-w2wm-4uae
22
vulnerability VCID-n7x9-wj56-a7gr
23
vulnerability VCID-nb8f-hdtw-9fdk
24
vulnerability VCID-nqwc-36ke-b3ff
25
vulnerability VCID-pjw9-sxen-b3cu
26
vulnerability VCID-q9p6-sxpv-g7gp
27
vulnerability VCID-sd6f-umkv-ffc2
28
vulnerability VCID-sgb7-h4sp-dbgf
29
vulnerability VCID-t9vy-6y7q-e3ac
30
vulnerability VCID-ubk6-8mnk-bqet
31
vulnerability VCID-y65y-kv8s-q3ef
32
vulnerability VCID-ycjb-zszd-4ufy
33
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.14.3
aliases CVE-2013-2134, GHSA-gqqm-564f-vvxq
risk_score 1.6
exploitability 2.0
weighted_severity 0.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gbqn-ywy3-d7cu
21
url VCID-hkhz-8ee5-57fm
vulnerability_id VCID-hkhz-8ee5-57fm
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2115
reference_id
reference_type
scores
0
value 0.8761
scoring_system epss
scoring_elements 0.9948
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2115
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=967656
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=967656
2
reference_url https://cwiki.apache.org/confluence/display/WW/S2-013
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/S2-013
3
reference_url https://cwiki.apache.org/confluence/display/WW/S2-014
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/S2-014
4
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
5
reference_url https://github.com/apache/struts/commit/d7804297e319c7a12245e1b536e565fcea6d650
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/d7804297e319c7a12245e1b536e565fcea6d650
6
reference_url https://github.com/apache/struts/commit/d934c6e7430b7b98e43a0a085a2304bd31a75c3d
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/d934c6e7430b7b98e43a0a085a2304bd31a75c3d
7
reference_url https://github.com/apache/struts/commit/ea96d18d0f75c390d2595648efa3563785c272c6
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/ea96d18d0f75c390d2595648efa3563785c272c6
8
reference_url https://github.com/apache/struts/commit/fed4f8e8a4ec69b5e7612b92d8ce3e476680474
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/fed4f8e8a4ec69b5e7612b92d8ce3e476680474
9
reference_url https://issues.apache.org/jira/browse/WW-4063
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4063
10
reference_url http://struts.apache.org/development/2.x/docs/s2-014.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/development/2.x/docs/s2-014.html
11
reference_url http://struts.apache.org/docs/s2-014.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-014.html
12
reference_url https://web.archive.org/web/20140212000331/http://www.securityfocus.com/bid/60167
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140212000331/http://www.securityfocus.com/bid/60167
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-2115
reference_id CVE-2013-2115
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-2115
14
reference_url https://github.com/advisories/GHSA-7ghm-rpc7-p7g5
reference_id GHSA-7ghm-rpc7-p7g5
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7ghm-rpc7-p7g5
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.14.2
purl pkg:maven/org.apache.struts/struts2-core@2.3.14.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-86yh-tym8-f3hh
6
vulnerability VCID-8huk-86a6-27cw
7
vulnerability VCID-8zze-44sk-audx
8
vulnerability VCID-aaet-jdfc-mbek
9
vulnerability VCID-c5xy-yhrn-fqf2
10
vulnerability VCID-ce3p-yaze-v7fy
11
vulnerability VCID-dzkb-wjvw-qufb
12
vulnerability VCID-ee2d-r8vy-skhq
13
vulnerability VCID-es18-pf68-h3de
14
vulnerability VCID-ev69-3d1j-nuac
15
vulnerability VCID-f4kx-q41m-5qer
16
vulnerability VCID-fmf4-k1py-g7fh
17
vulnerability VCID-gbqn-ywy3-d7cu
18
vulnerability VCID-hszd-513t-xucj
19
vulnerability VCID-huug-6mey-9fgz
20
vulnerability VCID-jyrs-6kjh-3qfa
21
vulnerability VCID-k6eu-y8xc-5kbj
22
vulnerability VCID-knq3-w2wm-4uae
23
vulnerability VCID-mw23-ujhz-a7cs
24
vulnerability VCID-n7x9-wj56-a7gr
25
vulnerability VCID-nb8f-hdtw-9fdk
26
vulnerability VCID-nqwc-36ke-b3ff
27
vulnerability VCID-pjw9-sxen-b3cu
28
vulnerability VCID-pmr8-6zz1-ryf2
29
vulnerability VCID-q9p6-sxpv-g7gp
30
vulnerability VCID-sd6f-umkv-ffc2
31
vulnerability VCID-sgb7-h4sp-dbgf
32
vulnerability VCID-t9vy-6y7q-e3ac
33
vulnerability VCID-ubk6-8mnk-bqet
34
vulnerability VCID-y65y-kv8s-q3ef
35
vulnerability VCID-ycjb-zszd-4ufy
36
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.14.2
aliases CVE-2013-2115, GHSA-7ghm-rpc7-p7g5
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hkhz-8ee5-57fm
22
url VCID-hszd-513t-xucj
vulnerability_id VCID-hszd-513t-xucj
summary 
Apache Struts forced double OGNL evaluation
Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double OGNL evaluation.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0785.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4461
reference_id
reference_type
scores
0
value 0.01704
scoring_system epss
scoring_elements 0.82619
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4461
1
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
2
reference_url https://security.netapp.com/advisory/ntap-20180629-0004
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20180629-0004
3
reference_url https://struts.apache.org/docs/s2-036.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://struts.apache.org/docs/s2-036.html
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-4461
reference_id CVE-2016-4461
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-4461
5
reference_url https://github.com/advisories/GHSA-864w-r5qj-h6fj
reference_id GHSA-864w-r5qj-h6fj
reference_type
scores
url https://github.com/advisories/GHSA-864w-r5qj-h6fj
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.29
purl pkg:maven/org.apache.struts/struts2-core@2.3.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-3q92-5sz9-2kd3
2
vulnerability VCID-86yh-tym8-f3hh
3
vulnerability VCID-aaet-jdfc-mbek
4
vulnerability VCID-ce3p-yaze-v7fy
5
vulnerability VCID-f4kx-q41m-5qer
6
vulnerability VCID-fmf4-k1py-g7fh
7
vulnerability VCID-jyrs-6kjh-3qfa
8
vulnerability VCID-n7x9-wj56-a7gr
9
vulnerability VCID-nb8f-hdtw-9fdk
10
vulnerability VCID-t9vy-6y7q-e3ac
11
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.29
aliases CVE-2016-4461, GHSA-864w-r5qj-h6fj
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hszd-513t-xucj
23
url VCID-huug-6mey-9fgz
vulnerability_id VCID-huug-6mey-9fgz
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0116
reference_id
reference_type
scores
0
value 0.02831
scoring_system epss
scoring_elements 0.86434
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0116
1
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
2
reference_url https://github.com/apache/struts/commit/1a668af7f1ffccea4a3b46d8d8c1fe1c7331ff02
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/1a668af7f1ffccea4a3b46d8d8c1fe1c7331ff02
3
reference_url https://github.com/apache/struts/commit/74e26830d2849a84729b33497f729e0f033dc147
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/74e26830d2849a84729b33497f729e0f033dc147
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0116
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0116
5
reference_url http://struts.apache.org/docs/s2-022.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-022.html
6
reference_url http://struts.apache.org/release/2.3.x/docs/s2-022.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/release/2.3.x/docs/s2-022.html
7
reference_url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0116
reference_id
reference_type
scores
url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0116
8
reference_url http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.16.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.16.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-c5xy-yhrn-fqf2
9
vulnerability VCID-ce3p-yaze-v7fy
10
vulnerability VCID-dzkb-wjvw-qufb
11
vulnerability VCID-ee2d-r8vy-skhq
12
vulnerability VCID-ev69-3d1j-nuac
13
vulnerability VCID-f4kx-q41m-5qer
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-hszd-513t-xucj
16
vulnerability VCID-jyrs-6kjh-3qfa
17
vulnerability VCID-k6eu-y8xc-5kbj
18
vulnerability VCID-n7x9-wj56-a7gr
19
vulnerability VCID-nb8f-hdtw-9fdk
20
vulnerability VCID-pjw9-sxen-b3cu
21
vulnerability VCID-q9p6-sxpv-g7gp
22
vulnerability VCID-sd6f-umkv-ffc2
23
vulnerability VCID-t9vy-6y7q-e3ac
24
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.16.3
1
url pkg:maven/org.apache.struts/struts2-core@2.3.20
purl pkg:maven/org.apache.struts/struts2-core@2.3.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-ce3p-yaze-v7fy
9
vulnerability VCID-d7b9-rv1g-qkfp
10
vulnerability VCID-ee2d-r8vy-skhq
11
vulnerability VCID-ev69-3d1j-nuac
12
vulnerability VCID-f4kx-q41m-5qer
13
vulnerability VCID-fdat-drnp-yudv
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-h3mw-239q-cbgn
16
vulnerability VCID-hszd-513t-xucj
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-n7x9-wj56-a7gr
19
vulnerability VCID-nb8f-hdtw-9fdk
20
vulnerability VCID-pjw9-sxen-b3cu
21
vulnerability VCID-q9p6-sxpv-g7gp
22
vulnerability VCID-t9vy-6y7q-e3ac
23
vulnerability VCID-vurd-7tee-e7a9
24
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.20
aliases CVE-2014-0116, GHSA-hmhq-382q-mp56
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-huug-6mey-9fgz
24
url VCID-jyrs-6kjh-3qfa
vulnerability_id VCID-jyrs-6kjh-3qfa
summary 
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %{...} syntax. Using forced OGNL evaluation on untrusted user input can lead to a Remote Code Execution and security degradation.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-31805
reference_id
reference_type
scores
0
value 0.93788
scoring_system epss
scoring_elements 0.99865
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-31805
1
reference_url https://cwiki.apache.org/confluence/display/WW/S2-062
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/S2-062
2
reference_url https://security.netapp.com/advisory/ntap-20220420-0001
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20220420-0001
3
reference_url https://security.netapp.com/advisory/ntap-20220420-0001/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20220420-0001/
4
reference_url https://www.oracle.com/security-alerts/cpujul2022.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujul2022.html
5
reference_url http://www.openwall.com/lists/oss-security/2022/04/12/6
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2022/04/12/6
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-31805
reference_id CVE-2021-31805
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-31805
7
reference_url https://github.com/advisories/GHSA-v8j6-6c2r-r27c
reference_id GHSA-v8j6-6c2r-r27c
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v8j6-6c2r-r27c
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.5.30
purl pkg:maven/org.apache.struts/struts2-core@2.5.30
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.30
aliases CVE-2021-31805, GHSA-v8j6-6c2r-r27c
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jyrs-6kjh-3qfa
25
url VCID-k6eu-y8xc-5kbj
vulnerability_id VCID-k6eu-y8xc-5kbj
summary
references
0
reference_url http://blog.h3xstream.com/2014/12/predicting-struts-csrf-token-cve-2014.html
reference_id
reference_type
scores
url http://blog.h3xstream.com/2014/12/predicting-struts-csrf-token-cve-2014.html
1
reference_url http://packetstormsecurity.com/files/129421/Apache-Struts-2.3.20-Security-Fixes.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/129421/Apache-Struts-2.3.20-Security-Fixes.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-7809
reference_id
reference_type
scores
0
value 0.07545
scoring_system epss
scoring_elements 0.91947
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-7809
3
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
4
reference_url https://github.com/apache/struts/commit/1f301038a751bf16e525607c3db513db835b2999
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/1f301038a751bf16e525607c3db513db835b2999
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-7809
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-7809
6
reference_url http://struts.apache.org/docs/s2-023.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/docs/s2-023.html
7
reference_url https://web.archive.org/web/20150201180327/http://www.securitytracker.com/id/1031309
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150201180327/http://www.securitytracker.com/id/1031309
8
reference_url https://web.archive.org/web/20150820131625/http://www.securityfocus.com/bid/71548
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150820131625/http://www.securityfocus.com/bid/71548
9
reference_url https://web.archive.org/web/20201023114849/http://www.securityfocus.com/archive/1/534175/100/0/threaded
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20201023114849/http://www.securityfocus.com/archive/1/534175/100/0/threaded
10
reference_url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7809
reference_id
reference_type
scores
url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7809
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.20
purl pkg:maven/org.apache.struts/struts2-core@2.3.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-ce3p-yaze-v7fy
9
vulnerability VCID-d7b9-rv1g-qkfp
10
vulnerability VCID-ee2d-r8vy-skhq
11
vulnerability VCID-ev69-3d1j-nuac
12
vulnerability VCID-f4kx-q41m-5qer
13
vulnerability VCID-fdat-drnp-yudv
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-h3mw-239q-cbgn
16
vulnerability VCID-hszd-513t-xucj
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-n7x9-wj56-a7gr
19
vulnerability VCID-nb8f-hdtw-9fdk
20
vulnerability VCID-pjw9-sxen-b3cu
21
vulnerability VCID-q9p6-sxpv-g7gp
22
vulnerability VCID-t9vy-6y7q-e3ac
23
vulnerability VCID-vurd-7tee-e7a9
24
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.20
aliases CVE-2014-7809, GHSA-h4v9-jf2r-9h6m
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k6eu-y8xc-5kbj
26
url VCID-knq3-w2wm-4uae
vulnerability_id VCID-knq3-w2wm-4uae
summary
references
0
reference_url http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045
1
reference_url http://jvn.jp/en/jp/JVN19294237/index.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN19294237/index.html
2
reference_url http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0094
reference_id
reference_type
scores
0
value 0.93134
scoring_system epss
scoring_elements 0.99799
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0094
4
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
5
reference_url https://github.com/apache/struts/commit/2e2da292166adbc78c4cb1e308b30ddb4fba6d3f
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/2e2da292166adbc78c4cb1e308b30ddb4fba6d3f
6
reference_url https://github.com/apache/struts/commit/6315241719be167542962da436b38782ed730c62
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/6315241719be167542962da436b38782ed730c62
7
reference_url https://github.com/apache/struts/commit/74e26830d2849a84729b33497f729e0f033dc147
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/74e26830d2849a84729b33497f729e0f033dc147
8
reference_url http://struts.apache.org/docs/s2-021.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-021.html
9
reference_url http://struts.apache.org/release/2.3.x/docs/s2-020.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/release/2.3.x/docs/s2-020.html
10
reference_url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0094
reference_id
reference_type
scores
url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0094
11
reference_url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0113
reference_id
reference_type
scores
url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0113
12
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676706
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=swg21676706
13
reference_url http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-350733.htm
14
reference_url http://www.konakart.com/downloads/ver-7-3-0-0-whats-new
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.konakart.com/downloads/ver-7-3-0-0-whats-new
15
reference_url http://www.vmware.com/security/advisories/VMSA-2014-0007.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vmware.com/security/advisories/VMSA-2014-0007.html
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0094
reference_id CVE-2014-0094
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0094
17
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/33142.rb
reference_id CVE-2014-0113;CVE-2014-0112;CVE-2014-0094;OSVDB-103918
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/33142.rb
18
reference_url https://github.com/rapid7/metasploit-framework/blob/3123175ac75c38bec5165e01cda05e3b38287003/modules/exploits/multi/http/struts_code_exec_classloader.rb
reference_id CVE-2014-0114;CVE-2014-0112;CVE-2014-0094
reference_type exploit
scores
url https://github.com/rapid7/metasploit-framework/blob/3123175ac75c38bec5165e01cda05e3b38287003/modules/exploits/multi/http/struts_code_exec_classloader.rb
19
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/41690.rb
reference_id CVE-2014-0114;CVE-2014-0112;CVE-2014-0094
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/41690.rb
20
reference_url https://github.com/advisories/GHSA-vrwc-qjmw-5rjm
reference_id GHSA-vrwc-qjmw-5rjm
reference_type
scores
url https://github.com/advisories/GHSA-vrwc-qjmw-5rjm
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.16.2
purl pkg:maven/org.apache.struts/struts2-core@2.3.16.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-c5xy-yhrn-fqf2
9
vulnerability VCID-ce3p-yaze-v7fy
10
vulnerability VCID-dzkb-wjvw-qufb
11
vulnerability VCID-ee2d-r8vy-skhq
12
vulnerability VCID-ev69-3d1j-nuac
13
vulnerability VCID-f4kx-q41m-5qer
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-hszd-513t-xucj
16
vulnerability VCID-huug-6mey-9fgz
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-k6eu-y8xc-5kbj
19
vulnerability VCID-n7x9-wj56-a7gr
20
vulnerability VCID-nb8f-hdtw-9fdk
21
vulnerability VCID-pjw9-sxen-b3cu
22
vulnerability VCID-q9p6-sxpv-g7gp
23
vulnerability VCID-sd6f-umkv-ffc2
24
vulnerability VCID-t9vy-6y7q-e3ac
25
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.16.2
aliases CVE-2014-0094, GHSA-vrwc-qjmw-5rjm
risk_score 1.6
exploitability 2.0
weighted_severity 0.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-knq3-w2wm-4uae
27
url VCID-mfq8-9cbx-qkau
vulnerability_id VCID-mfq8-9cbx-qkau
summary
references
0
reference_url http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T20:07:52Z/
url http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-0391
reference_id
reference_type
scores
0
value 0.87528
scoring_system epss
scoring_elements 0.99477
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-0391
2
reference_url http://secunia.com/advisories/47393
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T20:07:52Z/
url http://secunia.com/advisories/47393
3
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
4
reference_url https://github.com/apache/struts/commit/25e50069d60434a30395e3a98357ffba2bed427e
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/25e50069d60434a30395e3a98357ffba2bed427e
5
reference_url https://github.com/apache/struts/commit/5f54b8d087f5125d96838aafa5f64c2190e6885b
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/5f54b8d087f5125d96838aafa5f64c2190e6885b
6
reference_url https://github.com/apache/struts/commit/b4265d369dc29d57a9f2846a85b26598e83f3892
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/b4265d369dc29d57a9f2846a85b26598e83f3892
7
reference_url https://issues.apache.org/jira/browse/WW-3668
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T20:07:52Z/
url https://issues.apache.org/jira/browse/WW-3668
8
reference_url http://struts.apache.org/2.x/docs/s2-008.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T20:07:52Z/
url http://struts.apache.org/2.x/docs/s2-008.html
9
reference_url http://struts.apache.org/2.x/docs/version-notes-2311.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T20:07:52Z/
url http://struts.apache.org/2.x/docs/version-notes-2311.html
10
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0391
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2012-0391
11
reference_url https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T20:07:52Z/
url https://www.sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt
12
reference_url http://www.exploit-db.com/exploits/18329
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-02-10T20:07:52Z/
url http://www.exploit-db.com/exploits/18329
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-0391
reference_id CVE-2012-0391
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-0391
14
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/18984.rb
reference_id CVE-2012-0391;OSVDB-78277
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/18984.rb
15
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/18329.txt
reference_id CVE-2012-0394;CVE-2012-0393;CVE-2012-0392;CVE-2012-0391;OSVDB-78277;OSVDB-78276;OSVDB-78109;OSVDB-78108
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/webapps/18329.txt
16
reference_url https://github.com/advisories/GHSA-4wrr-9h5r-m92w
reference_id GHSA-4wrr-9h5r-m92w
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4wrr-9h5r-m92w
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.2.3.1
purl pkg:maven/org.apache.struts/struts2-core@2.2.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-5h58-smn3-gkh7
6
vulnerability VCID-6b94-6fkt-afdu
7
vulnerability VCID-6f4g-r6bc-63fg
8
vulnerability VCID-8huk-86a6-27cw
9
vulnerability VCID-8zze-44sk-audx
10
vulnerability VCID-c5xy-yhrn-fqf2
11
vulnerability VCID-ce3p-yaze-v7fy
12
vulnerability VCID-dzkb-wjvw-qufb
13
vulnerability VCID-ee2d-r8vy-skhq
14
vulnerability VCID-es18-pf68-h3de
15
vulnerability VCID-ev69-3d1j-nuac
16
vulnerability VCID-f4kx-q41m-5qer
17
vulnerability VCID-fmf4-k1py-g7fh
18
vulnerability VCID-gbqn-ywy3-d7cu
19
vulnerability VCID-hkhz-8ee5-57fm
20
vulnerability VCID-hszd-513t-xucj
21
vulnerability VCID-huug-6mey-9fgz
22
vulnerability VCID-jyrs-6kjh-3qfa
23
vulnerability VCID-k6eu-y8xc-5kbj
24
vulnerability VCID-knq3-w2wm-4uae
25
vulnerability VCID-mw23-ujhz-a7cs
26
vulnerability VCID-nb8f-hdtw-9fdk
27
vulnerability VCID-nqwc-36ke-b3ff
28
vulnerability VCID-pjw9-sxen-b3cu
29
vulnerability VCID-pmr8-6zz1-ryf2
30
vulnerability VCID-pr67-cm26-w7hm
31
vulnerability VCID-q9p6-sxpv-g7gp
32
vulnerability VCID-sd6f-umkv-ffc2
33
vulnerability VCID-sgb7-h4sp-dbgf
34
vulnerability VCID-t9vy-6y7q-e3ac
35
vulnerability VCID-ubk6-8mnk-bqet
36
vulnerability VCID-y65y-kv8s-q3ef
37
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.2.3.1
aliases CVE-2012-0391, GHSA-4wrr-9h5r-m92w
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mfq8-9cbx-qkau
28
url VCID-mw23-ujhz-a7cs
vulnerability_id VCID-mw23-ujhz-a7cs
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2135
reference_id
reference_type
scores
0
value 0.83013
scoring_system epss
scoring_elements 0.99272
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2135
1
reference_url https://cwiki.apache.org/confluence/display/WW/S2-015
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/S2-015
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/commit/01e6b251b4db78bfb7971033652e81d1af4cb3e
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/01e6b251b4db78bfb7971033652e81d1af4cb3e
4
reference_url https://github.com/apache/struts/commit/01e6b251b4db78bfb7971033652e81d1af4cb3e0
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/01e6b251b4db78bfb7971033652e81d1af4cb3e0
5
reference_url https://github.com/apache/struts/commit/041206d2a693d02c0cb2e72765275e55ba14049f
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/041206d2a693d02c0cb2e72765275e55ba14049f
6
reference_url https://github.com/apache/struts/commit/113c47082c09818bcef65acc436a2d0c7c47aa6c
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/113c47082c09818bcef65acc436a2d0c7c47aa6c
7
reference_url https://github.com/apache/struts/commit/54e5c912ebd9a1599bfcf7a719da17c28127bbe
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/54e5c912ebd9a1599bfcf7a719da17c28127bbe
8
reference_url https://github.com/apache/struts/commit/54e5c912ebd9a1599bfcf7a719da17c28127bbe3
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/54e5c912ebd9a1599bfcf7a719da17c28127bbe3
9
reference_url https://github.com/apache/struts/commit/711cf0201cdd319a38cf29238913312355db29ba
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/711cf0201cdd319a38cf29238913312355db29ba
10
reference_url https://github.com/apache/struts/commit/8b4fc81daeea3834bcbf73de5f48d0021917aa3
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/8b4fc81daeea3834bcbf73de5f48d0021917aa3
11
reference_url https://github.com/apache/struts/commit/8b4fc81daeea3834bcbf73de5f48d0021917aa37
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/8b4fc81daeea3834bcbf73de5f48d0021917aa37
12
reference_url https://github.com/apache/struts/commit/cfb6e9afbae320a4dd5bdd655154ab9fe5a92c1
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/cfb6e9afbae320a4dd5bdd655154ab9fe5a92c1
13
reference_url https://github.com/apache/struts/commit/cfb6e9afbae320a4dd5bdd655154ab9fe5a92c16
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/cfb6e9afbae320a4dd5bdd655154ab9fe5a92c16
14
reference_url https://issues.apache.org/jira/browse/WW-4090
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4090
15
reference_url https://issues.apache.org/jira/browse/WW-4094
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4094
16
reference_url https://issues.apache.org/jira/browse/WW-4095
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4095
17
reference_url http://struts.apache.org/development/2.x/docs/s2-015.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/development/2.x/docs/s2-015.html
18
reference_url http://struts.apache.org/docs/s2-015.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-015.html
19
reference_url https://web.archive.org/web/20140410223942/http://www.securityfocus.com/bid/64758
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140410223942/http://www.securityfocus.com/bid/64758
20
reference_url http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
21
reference_url http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html
22
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-2135
reference_id CVE-2013-2135
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-2135
23
reference_url https://github.com/advisories/GHSA-pw8r-x2qm-3h5m
reference_id GHSA-pw8r-x2qm-3h5m
reference_type
scores
url https://github.com/advisories/GHSA-pw8r-x2qm-3h5m
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.14.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.14.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-86yh-tym8-f3hh
6
vulnerability VCID-8huk-86a6-27cw
7
vulnerability VCID-8zze-44sk-audx
8
vulnerability VCID-aaet-jdfc-mbek
9
vulnerability VCID-c5xy-yhrn-fqf2
10
vulnerability VCID-ce3p-yaze-v7fy
11
vulnerability VCID-dzkb-wjvw-qufb
12
vulnerability VCID-ee2d-r8vy-skhq
13
vulnerability VCID-es18-pf68-h3de
14
vulnerability VCID-ev69-3d1j-nuac
15
vulnerability VCID-f4kx-q41m-5qer
16
vulnerability VCID-fmf4-k1py-g7fh
17
vulnerability VCID-hszd-513t-xucj
18
vulnerability VCID-huug-6mey-9fgz
19
vulnerability VCID-jyrs-6kjh-3qfa
20
vulnerability VCID-k6eu-y8xc-5kbj
21
vulnerability VCID-knq3-w2wm-4uae
22
vulnerability VCID-n7x9-wj56-a7gr
23
vulnerability VCID-nb8f-hdtw-9fdk
24
vulnerability VCID-nqwc-36ke-b3ff
25
vulnerability VCID-pjw9-sxen-b3cu
26
vulnerability VCID-q9p6-sxpv-g7gp
27
vulnerability VCID-sd6f-umkv-ffc2
28
vulnerability VCID-sgb7-h4sp-dbgf
29
vulnerability VCID-t9vy-6y7q-e3ac
30
vulnerability VCID-ubk6-8mnk-bqet
31
vulnerability VCID-y65y-kv8s-q3ef
32
vulnerability VCID-ycjb-zszd-4ufy
33
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.14.3
aliases CVE-2013-2135, GHSA-pw8r-x2qm-3h5m
risk_score 1.4
exploitability 2.0
weighted_severity 0.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mw23-ujhz-a7cs
29
url VCID-nb8f-hdtw-9fdk
vulnerability_id VCID-nb8f-hdtw-9fdk
summary 
Improperly Controlled Modification of Dynamically-Determined Object Attributes
Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.
references
0
reference_url http://packetstormsecurity.com/files/160108/Apache-Struts-2.5.20-Double-OGNL-Evaluation.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/160108/Apache-Struts-2.5.20-Double-OGNL-Evaluation.html
1
reference_url http://packetstormsecurity.com/files/160721/Apache-Struts-2-Forced-Multi-OGNL-Evaluation.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/160721/Apache-Struts-2-Forced-Multi-OGNL-Evaluation.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-0230
reference_id
reference_type
scores
0
value 0.93849
scoring_system epss
scoring_elements 0.99875
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-0230
3
reference_url https://cwiki.apache.org/confluence/display/ww/s2-059
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/ww/s2-059
4
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
5
reference_url https://launchpad.support.sap.com/#/notes/2982840
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://launchpad.support.sap.com/#/notes/2982840
6
reference_url https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7@%3Cannounce.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r1125f3044a0946d1e7e6f125a6170b58d413ebd4a95157e4608041c7@%3Cannounce.apache.org%3E
7
reference_url https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922@%3Cannounce.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r90890afea72a9571d666820b2fe5942a0a5f86be406fa31da3dd0922@%3Cannounce.apache.org%3E
8
reference_url https://www.oracle.com/security-alerts/cpuApr2021.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuApr2021.html
9
reference_url https://www.oracle.com/security-alerts/cpujan2021.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujan2021.html
10
reference_url https://www.oracle.com/security-alerts/cpuoct2021.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuoct2021.html
11
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/49068.py
reference_id CVE-2019-0230
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/49068.py
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-0230
reference_id CVE-2019-0230
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-0230
13
reference_url https://github.com/advisories/GHSA-wp4h-pvgw-5727
reference_id GHSA-wp4h-pvgw-5727
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wp4h-pvgw-5727
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.5.22
purl pkg:maven/org.apache.struts/struts2-core@2.5.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce3p-yaze-v7fy
1
vulnerability VCID-jyrs-6kjh-3qfa
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.22
aliases CVE-2019-0230, GHSA-wp4h-pvgw-5727
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nb8f-hdtw-9fdk
30
url VCID-nqwc-36ke-b3ff
vulnerability_id VCID-nqwc-36ke-b3ff
summary 
XSS via malicious action parameter
Multiple cross-site scripting (XSS) vulnerabilities in this package allow remote attackers to inject arbitrary web script or HTML via the namespace parameter to `actionNames.action` and `showConfig.action` in `config-browser/`.
references
0
reference_url http://packetstormsecurity.com/files/123805/Struts-2.3.15.3-Cross-Site-Scripting.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/123805/Struts-2.3.15.3-Cross-Site-Scripting.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-6348
reference_id
reference_type
scores
0
value 0.02766
scoring_system epss
scoring_elements 0.86282
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-6348
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6348
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6348
3
reference_url http://seclists.org/fulldisclosure/2013/Oct/244
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2013/Oct/244
4
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
5
reference_url https://issues.apache.org/jira/browse/WW-4213
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4213
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-6348
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-6348
7
reference_url https://security-tracker.debian.org/tracker/CVE-2013-6348
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security-tracker.debian.org/tracker/CVE-2013-6348
8
reference_url https://svn.apache.org/viewvc?view=revision&revision=1533354
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://svn.apache.org/viewvc?view=revision&revision=1533354
9
reference_url https://ubuntu.com/security/CVE-2013-6348
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://ubuntu.com/security/CVE-2013-6348
10
reference_url https://github.com/advisories/GHSA-3g8j-jj54-3vjg
reference_id GHSA-3g8j-jj54-3vjg
reference_type
scores
url https://github.com/advisories/GHSA-3g8j-jj54-3vjg
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.16
purl pkg:maven/org.apache.struts/struts2-core@2.3.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-c5xy-yhrn-fqf2
9
vulnerability VCID-ce3p-yaze-v7fy
10
vulnerability VCID-dzkb-wjvw-qufb
11
vulnerability VCID-ee2d-r8vy-skhq
12
vulnerability VCID-ev69-3d1j-nuac
13
vulnerability VCID-f4kx-q41m-5qer
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-hszd-513t-xucj
16
vulnerability VCID-huug-6mey-9fgz
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-k6eu-y8xc-5kbj
19
vulnerability VCID-knq3-w2wm-4uae
20
vulnerability VCID-n7x9-wj56-a7gr
21
vulnerability VCID-nb8f-hdtw-9fdk
22
vulnerability VCID-pjw9-sxen-b3cu
23
vulnerability VCID-q9p6-sxpv-g7gp
24
vulnerability VCID-sd6f-umkv-ffc2
25
vulnerability VCID-t9vy-6y7q-e3ac
26
vulnerability VCID-ubk6-8mnk-bqet
27
vulnerability VCID-ycjb-zszd-4ufy
28
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.16
aliases CVE-2013-6348, GHSA-3g8j-jj54-3vjg
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nqwc-36ke-b3ff
31
url VCID-pjsc-j2a1-7qdj
vulnerability_id VCID-pjsc-j2a1-7qdj
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.x before 2.0.11.1 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via vectors associated with improper handling of (1) " (double quote) characters in the href attribute of an s:a tag and (2) parameters in the action attribute of an s:url tag.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-6682
reference_id
reference_type
scores
0
value 0.0143
scoring_system epss
scoring_elements 0.80964
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-6682
1
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
2
reference_url https://github.com/apache/struts/commit/09147ffad2b3046ed21af0f524c5088e2ac551e6
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/09147ffad2b3046ed21af0f524c5088e2ac551e6
3
reference_url https://github.com/apache/struts/commit/bd3f2f59c9b09f70aed3ebab6bb69b464ee2d6cb
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/bd3f2f59c9b09f70aed3ebab6bb69b464ee2d6cb
4
reference_url https://github.com/apache/struts/commit/dae026a0f0511f83852053bae9d5a622e7f80486
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/dae026a0f0511f83852053bae9d5a622e7f80486
5
reference_url https://issues.apache.org/struts/browse/WW-2414
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/struts/browse/WW-2414
6
reference_url https://issues.apache.org/struts/browse/WW-2427
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/struts/browse/WW-2427
7
reference_url https://web.archive.org/web/20080610075918/http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449i20.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20080610075918/http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449i20.html
8
reference_url https://web.archive.org/web/20080611112834/http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20080611112834/http://www.nabble.com/Feedback%3A-WW-2414%2C-XSS-attack-is-possible-if-using-%3Cs%3Aurl-...%3E-and-%3Cs%3Aa-...%3E-td14771449.html
9
reference_url https://web.archive.org/web/20200229155553/http://www.securityfocus.com/bid/34686
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200229155553/http://www.securityfocus.com/bid/34686
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2008-6682
reference_id CVE-2008-6682
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2008-6682
11
reference_url https://github.com/advisories/GHSA-jgcr-9c2q-rvp8
reference_id GHSA-jgcr-9c2q-rvp8
reference_type
scores
url https://github.com/advisories/GHSA-jgcr-9c2q-rvp8
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.0.11.1
purl pkg:maven/org.apache.struts/struts2-core@2.0.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-4vrt-hdq4-7kc6
5
vulnerability VCID-5h58-smn3-gkh7
6
vulnerability VCID-6b94-6fkt-afdu
7
vulnerability VCID-6f4g-r6bc-63fg
8
vulnerability VCID-7pys-7ux7-fkfa
9
vulnerability VCID-8huk-86a6-27cw
10
vulnerability VCID-8zze-44sk-audx
11
vulnerability VCID-c5xy-yhrn-fqf2
12
vulnerability VCID-ce3p-yaze-v7fy
13
vulnerability VCID-dhnk-x3gc-z7hs
14
vulnerability VCID-dzkb-wjvw-qufb
15
vulnerability VCID-ee2d-r8vy-skhq
16
vulnerability VCID-es18-pf68-h3de
17
vulnerability VCID-ev69-3d1j-nuac
18
vulnerability VCID-f4kx-q41m-5qer
19
vulnerability VCID-fmf4-k1py-g7fh
20
vulnerability VCID-gbqn-ywy3-d7cu
21
vulnerability VCID-hkhz-8ee5-57fm
22
vulnerability VCID-hszd-513t-xucj
23
vulnerability VCID-huug-6mey-9fgz
24
vulnerability VCID-jyrs-6kjh-3qfa
25
vulnerability VCID-k6eu-y8xc-5kbj
26
vulnerability VCID-knq3-w2wm-4uae
27
vulnerability VCID-mfq8-9cbx-qkau
28
vulnerability VCID-mw23-ujhz-a7cs
29
vulnerability VCID-nb8f-hdtw-9fdk
30
vulnerability VCID-nqwc-36ke-b3ff
31
vulnerability VCID-pjw9-sxen-b3cu
32
vulnerability VCID-pmr8-6zz1-ryf2
33
vulnerability VCID-pr67-cm26-w7hm
34
vulnerability VCID-q9p6-sxpv-g7gp
35
vulnerability VCID-sd6f-umkv-ffc2
36
vulnerability VCID-sgb7-h4sp-dbgf
37
vulnerability VCID-t9vy-6y7q-e3ac
38
vulnerability VCID-ubk6-8mnk-bqet
39
vulnerability VCID-x851-jd32-vbgb
40
vulnerability VCID-y65y-kv8s-q3ef
41
vulnerability VCID-y6zz-57nn-ubd1
42
vulnerability VCID-ytqw-ezfq-n7fz
43
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.0.11.1
1
url pkg:maven/org.apache.struts/struts2-core@2.1.1
purl pkg:maven/org.apache.struts/struts2-core@2.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3q92-5sz9-2kd3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.1.1
aliases CVE-2008-6682, GHSA-jgcr-9c2q-rvp8
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pjsc-j2a1-7qdj
32
url VCID-pjw9-sxen-b3cu
vulnerability_id VCID-pjw9-sxen-b3cu
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-0785
reference_id
reference_type
scores
0
value 0.17798
scoring_system epss
scoring_elements 0.95244
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-0785
1
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/commit/15857a69e7baf3675804495a5954cd0756ac8364
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/15857a69e7baf3675804495a5954cd0756ac8364
4
reference_url http://struts.apache.org/docs/s2-029.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/docs/s2-029.html
5
reference_url https://web.archive.org/web/20210123095715/http://www.securityfocus.com/bid/85066
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20210123095715/http://www.securityfocus.com/bid/85066
6
reference_url https://web.archive.org/web/20220118185853/http://www.securitytracker.com/id/1035271
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20220118185853/http://www.securitytracker.com/id/1035271
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-0785
reference_id CVE-2016-0785
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-0785
8
reference_url https://github.com/advisories/GHSA-876p-4wgc-75rx
reference_id GHSA-876p-4wgc-75rx
reference_type
scores
url https://github.com/advisories/GHSA-876p-4wgc-75rx
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.20.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.20.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-aaet-jdfc-mbek
7
vulnerability VCID-ce3p-yaze-v7fy
8
vulnerability VCID-d7b9-rv1g-qkfp
9
vulnerability VCID-ee2d-r8vy-skhq
10
vulnerability VCID-ev69-3d1j-nuac
11
vulnerability VCID-fmf4-k1py-g7fh
12
vulnerability VCID-hszd-513t-xucj
13
vulnerability VCID-jyrs-6kjh-3qfa
14
vulnerability VCID-nb8f-hdtw-9fdk
15
vulnerability VCID-pjw9-sxen-b3cu
16
vulnerability VCID-q9p6-sxpv-g7gp
17
vulnerability VCID-t9vy-6y7q-e3ac
18
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.20.3
1
url pkg:maven/org.apache.struts/struts2-core@2.3.24.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.24.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2qup-v76d-8bge
2
vulnerability VCID-3q92-5sz9-2kd3
3
vulnerability VCID-86yh-tym8-f3hh
4
vulnerability VCID-aaet-jdfc-mbek
5
vulnerability VCID-ce3p-yaze-v7fy
6
vulnerability VCID-d7b9-rv1g-qkfp
7
vulnerability VCID-ee2d-r8vy-skhq
8
vulnerability VCID-f4kx-q41m-5qer
9
vulnerability VCID-fmf4-k1py-g7fh
10
vulnerability VCID-hszd-513t-xucj
11
vulnerability VCID-jyrs-6kjh-3qfa
12
vulnerability VCID-n7x9-wj56-a7gr
13
vulnerability VCID-nb8f-hdtw-9fdk
14
vulnerability VCID-pjw9-sxen-b3cu
15
vulnerability VCID-q9p6-sxpv-g7gp
16
vulnerability VCID-t9vy-6y7q-e3ac
17
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.24.3
2
url pkg:maven/org.apache.struts/struts2-core@2.3.28
purl pkg:maven/org.apache.struts/struts2-core@2.3.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2qup-v76d-8bge
2
vulnerability VCID-3q92-5sz9-2kd3
3
vulnerability VCID-86yh-tym8-f3hh
4
vulnerability VCID-8zze-44sk-audx
5
vulnerability VCID-aaet-jdfc-mbek
6
vulnerability VCID-ce3p-yaze-v7fy
7
vulnerability VCID-d7b9-rv1g-qkfp
8
vulnerability VCID-f4kx-q41m-5qer
9
vulnerability VCID-fdat-drnp-yudv
10
vulnerability VCID-fmf4-k1py-g7fh
11
vulnerability VCID-hszd-513t-xucj
12
vulnerability VCID-jyrs-6kjh-3qfa
13
vulnerability VCID-n7x9-wj56-a7gr
14
vulnerability VCID-nb8f-hdtw-9fdk
15
vulnerability VCID-q9p6-sxpv-g7gp
16
vulnerability VCID-t9vy-6y7q-e3ac
17
vulnerability VCID-vurd-7tee-e7a9
18
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.28
aliases CVE-2016-0785, GHSA-876p-4wgc-75rx
risk_score 0.1
exploitability 0.5
weighted_severity 0.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pjw9-sxen-b3cu
33
url VCID-pmr8-6zz1-ryf2
vulnerability_id VCID-pmr8-6zz1-ryf2
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1965
reference_id
reference_type
scores
0
value 0.91789
scoring_system epss
scoring_elements 0.99701
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1965
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=967655
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=967655
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/commit/7e6f641ebb142663cbd1653dc49bed725edf7f56
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/7e6f641ebb142663cbd1653dc49bed725edf7f56
4
reference_url http://struts.apache.org/development/2.x/docs/s2-012.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/development/2.x/docs/s2-012.html
5
reference_url http://struts.apache.org/docs/s2-012.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-012.html
6
reference_url https://web.archive.org/web/20140227231557/http://www.securityfocus.com/bid/60082
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140227231557/http://www.securityfocus.com/bid/60082
7
reference_url http://www.securityfocus.com/bid/60082
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/60082
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-1965
reference_id CVE-2013-1965
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-1965
9
reference_url https://github.com/advisories/GHSA-whmq-v94q-34p9
reference_id GHSA-whmq-v94q-34p9
reference_type
scores
url https://github.com/advisories/GHSA-whmq-v94q-34p9
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.14.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.14.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-86yh-tym8-f3hh
6
vulnerability VCID-8huk-86a6-27cw
7
vulnerability VCID-8zze-44sk-audx
8
vulnerability VCID-aaet-jdfc-mbek
9
vulnerability VCID-c5xy-yhrn-fqf2
10
vulnerability VCID-ce3p-yaze-v7fy
11
vulnerability VCID-dzkb-wjvw-qufb
12
vulnerability VCID-ee2d-r8vy-skhq
13
vulnerability VCID-es18-pf68-h3de
14
vulnerability VCID-ev69-3d1j-nuac
15
vulnerability VCID-f4kx-q41m-5qer
16
vulnerability VCID-fmf4-k1py-g7fh
17
vulnerability VCID-hszd-513t-xucj
18
vulnerability VCID-huug-6mey-9fgz
19
vulnerability VCID-jyrs-6kjh-3qfa
20
vulnerability VCID-k6eu-y8xc-5kbj
21
vulnerability VCID-knq3-w2wm-4uae
22
vulnerability VCID-n7x9-wj56-a7gr
23
vulnerability VCID-nb8f-hdtw-9fdk
24
vulnerability VCID-nqwc-36ke-b3ff
25
vulnerability VCID-pjw9-sxen-b3cu
26
vulnerability VCID-q9p6-sxpv-g7gp
27
vulnerability VCID-sd6f-umkv-ffc2
28
vulnerability VCID-sgb7-h4sp-dbgf
29
vulnerability VCID-t9vy-6y7q-e3ac
30
vulnerability VCID-ubk6-8mnk-bqet
31
vulnerability VCID-y65y-kv8s-q3ef
32
vulnerability VCID-ycjb-zszd-4ufy
33
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.14.3
aliases CVE-2013-1965, GHSA-whmq-v94q-34p9
risk_score 1.6
exploitability 2.0
weighted_severity 0.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pmr8-6zz1-ryf2
34
url VCID-pr67-cm26-w7hm
vulnerability_id VCID-pr67-cm26-w7hm
summary 
CSRF protection bypass
The token check mechanism in this package does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-4386
reference_id
reference_type
scores
0
value 0.03235
scoring_system epss
scoring_elements 0.87302
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-4386
1
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/78182
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/78182
2
reference_url https://issues.apache.org/jira/browse/WW-3858
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-3858
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-4386
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-4386
4
reference_url http://struts.apache.org/2.x/docs/s2-010.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.x/docs/s2-010.html
5
reference_url http://struts.apache.org/docs/s2-010.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-010.html
6
reference_url http://www.openwall.com/lists/oss-security/2012/09/01/4
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2012/09/01/4
7
reference_url http://www.openwall.com/lists/oss-security/2012/09/01/5
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2012/09/01/5
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.4.1
purl pkg:maven/org.apache.struts/struts2-core@2.3.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-6b94-6fkt-afdu
6
vulnerability VCID-86yh-tym8-f3hh
7
vulnerability VCID-8huk-86a6-27cw
8
vulnerability VCID-8zze-44sk-audx
9
vulnerability VCID-aaet-jdfc-mbek
10
vulnerability VCID-c5xy-yhrn-fqf2
11
vulnerability VCID-ce3p-yaze-v7fy
12
vulnerability VCID-dzkb-wjvw-qufb
13
vulnerability VCID-ee2d-r8vy-skhq
14
vulnerability VCID-es18-pf68-h3de
15
vulnerability VCID-ev69-3d1j-nuac
16
vulnerability VCID-f4kx-q41m-5qer
17
vulnerability VCID-fmf4-k1py-g7fh
18
vulnerability VCID-gbqn-ywy3-d7cu
19
vulnerability VCID-hkhz-8ee5-57fm
20
vulnerability VCID-hszd-513t-xucj
21
vulnerability VCID-huug-6mey-9fgz
22
vulnerability VCID-jyrs-6kjh-3qfa
23
vulnerability VCID-k6eu-y8xc-5kbj
24
vulnerability VCID-knq3-w2wm-4uae
25
vulnerability VCID-mw23-ujhz-a7cs
26
vulnerability VCID-nb8f-hdtw-9fdk
27
vulnerability VCID-nqwc-36ke-b3ff
28
vulnerability VCID-pjw9-sxen-b3cu
29
vulnerability VCID-pmr8-6zz1-ryf2
30
vulnerability VCID-q9p6-sxpv-g7gp
31
vulnerability VCID-sd6f-umkv-ffc2
32
vulnerability VCID-sgb7-h4sp-dbgf
33
vulnerability VCID-t9vy-6y7q-e3ac
34
vulnerability VCID-ubk6-8mnk-bqet
35
vulnerability VCID-y65y-kv8s-q3ef
36
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.4.1
aliases CVE-2012-4386, GHSA-2rvh-q539-q33v
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pr67-cm26-w7hm
35
url VCID-q9p6-sxpv-g7gp
vulnerability_id VCID-q9p6-sxpv-g7gp
summary
references
0
reference_url http://jvndb.jvn.jp/jvndb/JVNDB-2016-000110
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://jvndb.jvn.jp/jvndb/JVNDB-2016-000110
1
reference_url http://jvn.jp/en/jp/JVN07710476/index.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN07710476/index.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4438
reference_id
reference_type
scores
0
value 0.62087
scoring_system epss
scoring_elements 0.9837
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4438
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1348238
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1348238
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
6
reference_url https://github.com/apache/struts/commit/6d7ac40dcede1793a4534a3dc249fd562d495e8c
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/6d7ac40dcede1793a4534a3dc249fd562d495e8c
7
reference_url https://github.com/apache/struts/commit/76eb8f38a33ad0f1f48464ee1311559c8d52dd6d
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/76eb8f38a33ad0f1f48464ee1311559c8d52dd6d
8
reference_url https://github.com/apache/struts/commit/c9c21378f2fb2ff21355c128c45e106ebd87ad7c
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/c9c21378f2fb2ff21355c128c45e106ebd87ad7c
9
reference_url https://github.com/apache/struts/commit/deefeffd11425f0cd0b797cd86a9b3550234262b
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/deefeffd11425f0cd0b797cd86a9b3550234262b
10
reference_url https://struts.apache.org/docs/s2-037.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://struts.apache.org/docs/s2-037.html
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-4438
reference_id CVE-2016-4438
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-4438
12
reference_url https://github.com/advisories/GHSA-4prj-vw9j-v6pr
reference_id GHSA-4prj-vw9j-v6pr
reference_type
scores
url https://github.com/advisories/GHSA-4prj-vw9j-v6pr
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.29
purl pkg:maven/org.apache.struts/struts2-core@2.3.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-3q92-5sz9-2kd3
2
vulnerability VCID-86yh-tym8-f3hh
3
vulnerability VCID-aaet-jdfc-mbek
4
vulnerability VCID-ce3p-yaze-v7fy
5
vulnerability VCID-f4kx-q41m-5qer
6
vulnerability VCID-fmf4-k1py-g7fh
7
vulnerability VCID-jyrs-6kjh-3qfa
8
vulnerability VCID-n7x9-wj56-a7gr
9
vulnerability VCID-nb8f-hdtw-9fdk
10
vulnerability VCID-t9vy-6y7q-e3ac
11
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.29
aliases CVE-2016-4438, GHSA-4prj-vw9j-v6pr
risk_score 0.3
exploitability 0.5
weighted_severity 0.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q9p6-sxpv-g7gp
36
url VCID-sd6f-umkv-ffc2
vulnerability_id VCID-sd6f-umkv-ffc2
summary 
Improper Input Validation
The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-3090
reference_id
reference_type
scores
0
value 0.02195
scoring_system epss
scoring_elements 0.84682
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-3090
1
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
2
reference_url https://security.netapp.com/advisory/ntap-20180629-0005
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20180629-0005
3
reference_url https://security.netapp.com/advisory/ntap-20180629-0005/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20180629-0005/
4
reference_url https://struts.apache.org/docs/s2-027.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://struts.apache.org/docs/s2-027.html
5
reference_url https://web.archive.org/web/20210123095942/http://www.securityfocus.com/bid/85131
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20210123095942/http://www.securityfocus.com/bid/85131
6
reference_url https://web.archive.org/web/20211206100940/https://www.securitytracker.com/id/1035267
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20211206100940/https://www.securitytracker.com/id/1035267
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-3090
reference_id CVE-2016-3090
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-3090
8
reference_url https://github.com/advisories/GHSA-ggmp-fxfg-277r
reference_id GHSA-ggmp-fxfg-277r
reference_type
scores
url https://github.com/advisories/GHSA-ggmp-fxfg-277r
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.20
purl pkg:maven/org.apache.struts/struts2-core@2.3.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-ce3p-yaze-v7fy
9
vulnerability VCID-d7b9-rv1g-qkfp
10
vulnerability VCID-ee2d-r8vy-skhq
11
vulnerability VCID-ev69-3d1j-nuac
12
vulnerability VCID-f4kx-q41m-5qer
13
vulnerability VCID-fdat-drnp-yudv
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-h3mw-239q-cbgn
16
vulnerability VCID-hszd-513t-xucj
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-n7x9-wj56-a7gr
19
vulnerability VCID-nb8f-hdtw-9fdk
20
vulnerability VCID-pjw9-sxen-b3cu
21
vulnerability VCID-q9p6-sxpv-g7gp
22
vulnerability VCID-t9vy-6y7q-e3ac
23
vulnerability VCID-vurd-7tee-e7a9
24
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.20
aliases CVE-2016-3090, GHSA-ggmp-fxfg-277r
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sd6f-umkv-ffc2
37
url VCID-sgb7-h4sp-dbgf
vulnerability_id VCID-sgb7-h4sp-dbgf
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2248
reference_id
reference_type
scores
0
value 0.91954
scoring_system epss
scoring_elements 0.99712
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2248
1
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
2
reference_url https://github.com/apache/struts/commit/3cfe34fefedcf0fdcfcb061c0aea34a715b7de6
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/3cfe34fefedcf0fdcfcb061c0aea34a715b7de6
3
reference_url https://github.com/apache/struts/commit/630e1ba065a8215c4e9ac03bfb09be9d655c2b6e
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/630e1ba065a8215c4e9ac03bfb09be9d655c2b6e
4
reference_url https://issues.apache.org/jira/browse/WW-4140
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-4140
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-2248
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-2248
6
reference_url http://struts.apache.org/docs/s2-017.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-017.html
7
reference_url http://struts.apache.org/release/2.3.x/docs/s2-017.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/release/2.3.x/docs/s2-017.html
8
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/38666.txt
reference_id CVE-2013-2248;OSVDB-95406
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/38666.txt
9
reference_url https://www.securityfocus.com/bid/61196/info
reference_id CVE-2013-2248;OSVDB-95406
reference_type exploit
scores
url https://www.securityfocus.com/bid/61196/info
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.15.1
purl pkg:maven/org.apache.struts/struts2-core@2.3.15.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-c5xy-yhrn-fqf2
9
vulnerability VCID-ce3p-yaze-v7fy
10
vulnerability VCID-dzkb-wjvw-qufb
11
vulnerability VCID-ee2d-r8vy-skhq
12
vulnerability VCID-es18-pf68-h3de
13
vulnerability VCID-ev69-3d1j-nuac
14
vulnerability VCID-f4kx-q41m-5qer
15
vulnerability VCID-fmf4-k1py-g7fh
16
vulnerability VCID-hszd-513t-xucj
17
vulnerability VCID-huug-6mey-9fgz
18
vulnerability VCID-jyrs-6kjh-3qfa
19
vulnerability VCID-k6eu-y8xc-5kbj
20
vulnerability VCID-knq3-w2wm-4uae
21
vulnerability VCID-n7x9-wj56-a7gr
22
vulnerability VCID-nb8f-hdtw-9fdk
23
vulnerability VCID-nqwc-36ke-b3ff
24
vulnerability VCID-pjw9-sxen-b3cu
25
vulnerability VCID-q9p6-sxpv-g7gp
26
vulnerability VCID-sd6f-umkv-ffc2
27
vulnerability VCID-t9vy-6y7q-e3ac
28
vulnerability VCID-ubk6-8mnk-bqet
29
vulnerability VCID-y65y-kv8s-q3ef
30
vulnerability VCID-ycjb-zszd-4ufy
31
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.15.1
aliases CVE-2013-2248, GHSA-rpj9-r897-wc6q
risk_score 1.6
exploitability 2.0
weighted_severity 0.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sgb7-h4sp-dbgf
38
url VCID-t9vy-6y7q-e3ac
vulnerability_id VCID-t9vy-6y7q-e3ac
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-0233
reference_id
reference_type
scores
0
value 0.0778
scoring_system epss
scoring_elements 0.92087
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-0233
1
reference_url https://cwiki.apache.org/confluence/display/ww/s2-060
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/ww/s2-060
2
reference_url https://launchpad.support.sap.com/#/notes/2982840
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://launchpad.support.sap.com/#/notes/2982840
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-0233
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-0233
4
reference_url https://www.oracle.com/security-alerts/cpuApr2021.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuApr2021.html
5
reference_url https://www.oracle.com/security-alerts/cpujan2021.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujan2021.html
6
reference_url https://www.oracle.com/security-alerts/cpuoct2021.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuoct2021.html
7
reference_url https://github.com/advisories/GHSA-ccp5-gg58-pxfm
reference_id GHSA-ccp5-gg58-pxfm
reference_type
scores
url https://github.com/advisories/GHSA-ccp5-gg58-pxfm
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.5.22
purl pkg:maven/org.apache.struts/struts2-core@2.5.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ce3p-yaze-v7fy
1
vulnerability VCID-jyrs-6kjh-3qfa
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.22
aliases CVE-2019-0233, GHSA-ccp5-gg58-pxfm
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t9vy-6y7q-e3ac
39
url VCID-ubk6-8mnk-bqet
vulnerability_id VCID-ubk6-8mnk-bqet
summary
references
0
reference_url http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://jvndb.jvn.jp/jvndb/JVNDB-2014-000045
1
reference_url http://jvn.jp/en/jp/JVN19294237/index.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN19294237/index.html
2
reference_url http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/127215/VMware-Security-Advisory-2014-0007.html
3
reference_url https://access.redhat.com/errata/RHSA-2019:0910
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:0910
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0112
reference_id
reference_type
scores
0
value 0.91525
scoring_system epss
scoring_elements 0.99685
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0112
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1091939
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1091939
6
reference_url https://cwiki.apache.org/confluence/display/WW/S2-021
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/S2-021
7
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
8
reference_url https://github.com/apache/struts/commit/74e26830d2849a84729b33497f729e0f033dc147
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/74e26830d2849a84729b33497f729e0f033dc147
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0112
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0112
10
reference_url http://struts.apache.org/docs/s2-021.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-021.html
11
reference_url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0112
reference_id
reference_type
scores
url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0112
12
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676706
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=swg21676706
13
reference_url http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
14
reference_url http://www.vmware.com/security/advisories/VMSA-2014-0007.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.vmware.com/security/advisories/VMSA-2014-0007.html
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.16.2
purl pkg:maven/org.apache.struts/struts2-core@2.3.16.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-c5xy-yhrn-fqf2
9
vulnerability VCID-ce3p-yaze-v7fy
10
vulnerability VCID-dzkb-wjvw-qufb
11
vulnerability VCID-ee2d-r8vy-skhq
12
vulnerability VCID-ev69-3d1j-nuac
13
vulnerability VCID-f4kx-q41m-5qer
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-hszd-513t-xucj
16
vulnerability VCID-huug-6mey-9fgz
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-k6eu-y8xc-5kbj
19
vulnerability VCID-n7x9-wj56-a7gr
20
vulnerability VCID-nb8f-hdtw-9fdk
21
vulnerability VCID-pjw9-sxen-b3cu
22
vulnerability VCID-q9p6-sxpv-g7gp
23
vulnerability VCID-sd6f-umkv-ffc2
24
vulnerability VCID-t9vy-6y7q-e3ac
25
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.16.2
1
url pkg:maven/org.apache.struts/struts2-core@2.3.20
purl pkg:maven/org.apache.struts/struts2-core@2.3.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-ce3p-yaze-v7fy
9
vulnerability VCID-d7b9-rv1g-qkfp
10
vulnerability VCID-ee2d-r8vy-skhq
11
vulnerability VCID-ev69-3d1j-nuac
12
vulnerability VCID-f4kx-q41m-5qer
13
vulnerability VCID-fdat-drnp-yudv
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-h3mw-239q-cbgn
16
vulnerability VCID-hszd-513t-xucj
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-n7x9-wj56-a7gr
19
vulnerability VCID-nb8f-hdtw-9fdk
20
vulnerability VCID-pjw9-sxen-b3cu
21
vulnerability VCID-q9p6-sxpv-g7gp
22
vulnerability VCID-t9vy-6y7q-e3ac
23
vulnerability VCID-vurd-7tee-e7a9
24
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.20
aliases CVE-2014-0112, GHSA-prjv-jj26-wf8h
risk_score 1.6
exploitability 2.0
weighted_severity 0.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ubk6-8mnk-bqet
40
url VCID-x851-jd32-vbgb
vulnerability_id VCID-x851-jd32-vbgb
summary
references
0
reference_url http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://archives.neohapsis.com/archives/bugtraq/2012-01/0031.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-0392
reference_id
reference_type
scores
0
value 0.90286
scoring_system epss
scoring_elements 0.99613
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-0392
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/commit/25e50069d60434a30395e3a98357ffba2bed427e
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/25e50069d60434a30395e3a98357ffba2bed427e
4
reference_url https://github.com/apache/struts/commit/34c80dae734e70f13c0e46f9c83602fb71318e58
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/34c80dae734e70f13c0e46f9c83602fb71318e58
5
reference_url https://lists.immunityinc.com/pipermail/dailydave/2012-January/000011.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.immunityinc.com/pipermail/dailydave/2012-January/000011.html
6
reference_url http://struts.apache.org/2.x/docs/s2-008.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.x/docs/s2-008.html
7
reference_url http://struts.apache.org/2.x/docs/version-notes-2311.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.x/docs/version-notes-2311.html
8
reference_url https://web.archive.org/web/20120612142634/https://sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20120612142634/https://sec-consult.com/files/20120104-0_Apache_Struts2_Multiple_Critical_Vulnerabilities.txt
9
reference_url https://web.archive.org/web/20140723153720/http://secunia.com/advisories/47393
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140723153720/http://secunia.com/advisories/47393
10
reference_url https://web.archive.org/web/20140723153720/http://secunia.com/advisories/47393/
reference_id
reference_type
scores
url https://web.archive.org/web/20140723153720/http://secunia.com/advisories/47393/
11
reference_url http://www.exploit-db.com/exploits/18329
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.exploit-db.com/exploits/18329
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-0392
reference_id CVE-2012-0392
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-0392
13
reference_url https://github.com/advisories/GHSA-2ppp-xj34-vvf7
reference_id GHSA-2ppp-xj34-vvf7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2ppp-xj34-vvf7
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.2.3.1
purl pkg:maven/org.apache.struts/struts2-core@2.2.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-5h58-smn3-gkh7
6
vulnerability VCID-6b94-6fkt-afdu
7
vulnerability VCID-6f4g-r6bc-63fg
8
vulnerability VCID-8huk-86a6-27cw
9
vulnerability VCID-8zze-44sk-audx
10
vulnerability VCID-c5xy-yhrn-fqf2
11
vulnerability VCID-ce3p-yaze-v7fy
12
vulnerability VCID-dzkb-wjvw-qufb
13
vulnerability VCID-ee2d-r8vy-skhq
14
vulnerability VCID-es18-pf68-h3de
15
vulnerability VCID-ev69-3d1j-nuac
16
vulnerability VCID-f4kx-q41m-5qer
17
vulnerability VCID-fmf4-k1py-g7fh
18
vulnerability VCID-gbqn-ywy3-d7cu
19
vulnerability VCID-hkhz-8ee5-57fm
20
vulnerability VCID-hszd-513t-xucj
21
vulnerability VCID-huug-6mey-9fgz
22
vulnerability VCID-jyrs-6kjh-3qfa
23
vulnerability VCID-k6eu-y8xc-5kbj
24
vulnerability VCID-knq3-w2wm-4uae
25
vulnerability VCID-mw23-ujhz-a7cs
26
vulnerability VCID-nb8f-hdtw-9fdk
27
vulnerability VCID-nqwc-36ke-b3ff
28
vulnerability VCID-pjw9-sxen-b3cu
29
vulnerability VCID-pmr8-6zz1-ryf2
30
vulnerability VCID-pr67-cm26-w7hm
31
vulnerability VCID-q9p6-sxpv-g7gp
32
vulnerability VCID-sd6f-umkv-ffc2
33
vulnerability VCID-sgb7-h4sp-dbgf
34
vulnerability VCID-t9vy-6y7q-e3ac
35
vulnerability VCID-ubk6-8mnk-bqet
36
vulnerability VCID-y65y-kv8s-q3ef
37
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.2.3.1
aliases CVE-2012-0392, GHSA-2ppp-xj34-vvf7
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-x851-jd32-vbgb
41
url VCID-y65y-kv8s-q3ef
vulnerability_id VCID-y65y-kv8s-q3ef
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4310
reference_id
reference_type
scores
0
value 0.08725
scoring_system epss
scoring_elements 0.92624
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4310
1
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
2
reference_url https://github.com/apache/struts/commit/0c8366cb792227d484b9ca13e537037dd0cb57dc
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/0c8366cb792227d484b9ca13e537037dd0cb57dc
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-4310
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-4310
4
reference_url http://struts.apache.org/docs/s2-018.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-018.html
5
reference_url http://struts.apache.org/release/2.3.x/docs/s2-018.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/release/2.3.x/docs/s2-018.html
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.15.3
purl pkg:maven/org.apache.struts/struts2-core@2.3.15.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-c5xy-yhrn-fqf2
9
vulnerability VCID-ce3p-yaze-v7fy
10
vulnerability VCID-dzkb-wjvw-qufb
11
vulnerability VCID-ee2d-r8vy-skhq
12
vulnerability VCID-ev69-3d1j-nuac
13
vulnerability VCID-f4kx-q41m-5qer
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-hszd-513t-xucj
16
vulnerability VCID-huug-6mey-9fgz
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-k6eu-y8xc-5kbj
19
vulnerability VCID-knq3-w2wm-4uae
20
vulnerability VCID-n7x9-wj56-a7gr
21
vulnerability VCID-nb8f-hdtw-9fdk
22
vulnerability VCID-nqwc-36ke-b3ff
23
vulnerability VCID-pjw9-sxen-b3cu
24
vulnerability VCID-q9p6-sxpv-g7gp
25
vulnerability VCID-sd6f-umkv-ffc2
26
vulnerability VCID-t9vy-6y7q-e3ac
27
vulnerability VCID-ubk6-8mnk-bqet
28
vulnerability VCID-ycjb-zszd-4ufy
29
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.15.3
aliases CVE-2013-4310, GHSA-q5q8-jghf-3pm3
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y65y-kv8s-q3ef
42
url VCID-y6zz-57nn-ubd1
vulnerability_id VCID-y6zz-57nn-ubd1
summary
references
0
reference_url http://jvndb.jvn.jp/jvndb/JVNDB-2012-000012
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://jvndb.jvn.jp/jvndb/JVNDB-2012-000012
1
reference_url http://jvn.jp/en/jp/JVN79099262/index.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN79099262/index.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-0838
reference_id
reference_type
scores
0
value 0.11109
scoring_system epss
scoring_elements 0.93588
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-0838
3
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
4
reference_url https://github.com/apache/struts/commit/25e50069d60434a30395e3a98357ffba2bed427e
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/25e50069d60434a30395e3a98357ffba2bed427e
5
reference_url https://github.com/apache/struts/commit/5f54b8d087f5125d96838aafa5f64c2190e6885b
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/5f54b8d087f5125d96838aafa5f64c2190e6885b
6
reference_url https://github.com/apache/struts/commit/b4265d369dc29d57a9f2846a85b26598e83f3892
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts/commit/b4265d369dc29d57a9f2846a85b26598e83f3892
7
reference_url https://issues.apache.org/jira/browse/WW-3668
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-3668
8
reference_url http://struts.apache.org/2.3.1.2/docs/s2-007.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.3.1.2/docs/s2-007.html
9
reference_url http://struts.apache.org/docs/s2-007.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-007.html
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-0838
reference_id CVE-2012-0838
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-0838
11
reference_url https://github.com/advisories/GHSA-mwrx-hx6x-3hhv
reference_id GHSA-mwrx-hx6x-3hhv
reference_type
scores
url https://github.com/advisories/GHSA-mwrx-hx6x-3hhv
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.2.3.1
purl pkg:maven/org.apache.struts/struts2-core@2.2.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-5h58-smn3-gkh7
6
vulnerability VCID-6b94-6fkt-afdu
7
vulnerability VCID-6f4g-r6bc-63fg
8
vulnerability VCID-8huk-86a6-27cw
9
vulnerability VCID-8zze-44sk-audx
10
vulnerability VCID-c5xy-yhrn-fqf2
11
vulnerability VCID-ce3p-yaze-v7fy
12
vulnerability VCID-dzkb-wjvw-qufb
13
vulnerability VCID-ee2d-r8vy-skhq
14
vulnerability VCID-es18-pf68-h3de
15
vulnerability VCID-ev69-3d1j-nuac
16
vulnerability VCID-f4kx-q41m-5qer
17
vulnerability VCID-fmf4-k1py-g7fh
18
vulnerability VCID-gbqn-ywy3-d7cu
19
vulnerability VCID-hkhz-8ee5-57fm
20
vulnerability VCID-hszd-513t-xucj
21
vulnerability VCID-huug-6mey-9fgz
22
vulnerability VCID-jyrs-6kjh-3qfa
23
vulnerability VCID-k6eu-y8xc-5kbj
24
vulnerability VCID-knq3-w2wm-4uae
25
vulnerability VCID-mw23-ujhz-a7cs
26
vulnerability VCID-nb8f-hdtw-9fdk
27
vulnerability VCID-nqwc-36ke-b3ff
28
vulnerability VCID-pjw9-sxen-b3cu
29
vulnerability VCID-pmr8-6zz1-ryf2
30
vulnerability VCID-pr67-cm26-w7hm
31
vulnerability VCID-q9p6-sxpv-g7gp
32
vulnerability VCID-sd6f-umkv-ffc2
33
vulnerability VCID-sgb7-h4sp-dbgf
34
vulnerability VCID-t9vy-6y7q-e3ac
35
vulnerability VCID-ubk6-8mnk-bqet
36
vulnerability VCID-y65y-kv8s-q3ef
37
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.2.3.1
aliases CVE-2012-0838, GHSA-mwrx-hx6x-3hhv
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y6zz-57nn-ubd1
43
url VCID-ytqw-ezfq-n7fz
vulnerability_id VCID-ytqw-ezfq-n7fz
summary 
Multiple XSS flaws in XWork
Multiple cross-site scripting (XSS) vulnerabilities in XWork allow remote attackers to inject arbitrary web script or HTML via vectors involving an action name, the action attribute of an s:submit element, or the method attribute of an `s:submit` element.
references
0
reference_url http://jvndb.jvn.jp/jvndb/JVNDB-2011-000106
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://jvndb.jvn.jp/jvndb/JVNDB-2011-000106
1
reference_url http://jvn.jp/en/jp/JVN25435092/index.html
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://jvn.jp/en/jp/JVN25435092/index.html
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-1772
reference_id
reference_type
scores
0
value 0.59227
scoring_system epss
scoring_elements 0.98269
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-1772
3
reference_url http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://secureappdev.blogspot.com/2011/05/apache-struts-2-xwork-webwork-reflected.html
4
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
5
reference_url https://issues.apache.org/jira/browse/WW-3579
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/WW-3579
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-1772
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-1772
7
reference_url http://struts.apache.org/2.2.3/docs/version-notes-223.html
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.2.3/docs/version-notes-223.html
8
reference_url http://struts.apache.org/2.x/docs/s2-006.html
reference_id
reference_type
scores
0
value LOW
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.x/docs/s2-006.html
9
reference_url http://struts.apache.org/docs/s2-006.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-006.html
10
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/35735.txt
reference_id CVE-2011-1772;OSVDB-72238
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/35735.txt
11
reference_url https://www.securityfocus.com/bid/47784/info
reference_id CVE-2011-1772;OSVDB-72238
reference_type exploit
scores
url https://www.securityfocus.com/bid/47784/info
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.2.3
purl pkg:maven/org.apache.struts/struts2-core@2.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-1xze-jfs9-yyba
2
vulnerability VCID-2p29-qaqw-9fa9
3
vulnerability VCID-2qup-v76d-8bge
4
vulnerability VCID-3q92-5sz9-2kd3
5
vulnerability VCID-4vrt-hdq4-7kc6
6
vulnerability VCID-5h58-smn3-gkh7
7
vulnerability VCID-6b94-6fkt-afdu
8
vulnerability VCID-6f4g-r6bc-63fg
9
vulnerability VCID-8huk-86a6-27cw
10
vulnerability VCID-8zze-44sk-audx
11
vulnerability VCID-c5xy-yhrn-fqf2
12
vulnerability VCID-ce3p-yaze-v7fy
13
vulnerability VCID-dzkb-wjvw-qufb
14
vulnerability VCID-ee2d-r8vy-skhq
15
vulnerability VCID-es18-pf68-h3de
16
vulnerability VCID-ev69-3d1j-nuac
17
vulnerability VCID-f4kx-q41m-5qer
18
vulnerability VCID-fmf4-k1py-g7fh
19
vulnerability VCID-gbqn-ywy3-d7cu
20
vulnerability VCID-hkhz-8ee5-57fm
21
vulnerability VCID-hszd-513t-xucj
22
vulnerability VCID-huug-6mey-9fgz
23
vulnerability VCID-jyrs-6kjh-3qfa
24
vulnerability VCID-k6eu-y8xc-5kbj
25
vulnerability VCID-knq3-w2wm-4uae
26
vulnerability VCID-mfq8-9cbx-qkau
27
vulnerability VCID-mw23-ujhz-a7cs
28
vulnerability VCID-nb8f-hdtw-9fdk
29
vulnerability VCID-nqwc-36ke-b3ff
30
vulnerability VCID-pjw9-sxen-b3cu
31
vulnerability VCID-pmr8-6zz1-ryf2
32
vulnerability VCID-pr67-cm26-w7hm
33
vulnerability VCID-q9p6-sxpv-g7gp
34
vulnerability VCID-sd6f-umkv-ffc2
35
vulnerability VCID-sgb7-h4sp-dbgf
36
vulnerability VCID-t9vy-6y7q-e3ac
37
vulnerability VCID-ubk6-8mnk-bqet
38
vulnerability VCID-x851-jd32-vbgb
39
vulnerability VCID-y65y-kv8s-q3ef
40
vulnerability VCID-y6zz-57nn-ubd1
41
vulnerability VCID-zkdp-x1s4-jbbx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.2.3
aliases CVE-2011-1772, GHSA-56f8-g68r-j699
risk_score 0.2
exploitability 0.5
weighted_severity 0.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ytqw-ezfq-n7fz
44
url VCID-zkdp-x1s4-jbbx
vulnerability_id VCID-zkdp-x1s4-jbbx
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0113
reference_id
reference_type
scores
0
value 0.82455
scoring_system epss
scoring_elements 0.99249
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0113
1
reference_url https://cwiki.apache.org/confluence/display/WW/S2-021
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://cwiki.apache.org/confluence/display/WW/S2-021
2
reference_url https://github.com/apache/struts
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/struts
3
reference_url https://github.com/apache/struts/commit/74e26830d2849a84729b33497f729e0f033dc147
reference_id
reference_type
scores
url https://github.com/apache/struts/commit/74e26830d2849a84729b33497f729e0f033dc147
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0113
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0113
5
reference_url http://struts.apache.org/docs/s2-021.html
reference_id
reference_type
scores
url http://struts.apache.org/docs/s2-021.html
6
reference_url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0113
reference_id
reference_type
scores
url https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0113
7
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21676706
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=swg21676706
fixed_packages
0
url pkg:maven/org.apache.struts/struts2-core@2.3.16.2
purl pkg:maven/org.apache.struts/struts2-core@2.3.16.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-c5xy-yhrn-fqf2
9
vulnerability VCID-ce3p-yaze-v7fy
10
vulnerability VCID-dzkb-wjvw-qufb
11
vulnerability VCID-ee2d-r8vy-skhq
12
vulnerability VCID-ev69-3d1j-nuac
13
vulnerability VCID-f4kx-q41m-5qer
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-hszd-513t-xucj
16
vulnerability VCID-huug-6mey-9fgz
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-k6eu-y8xc-5kbj
19
vulnerability VCID-n7x9-wj56-a7gr
20
vulnerability VCID-nb8f-hdtw-9fdk
21
vulnerability VCID-pjw9-sxen-b3cu
22
vulnerability VCID-q9p6-sxpv-g7gp
23
vulnerability VCID-sd6f-umkv-ffc2
24
vulnerability VCID-t9vy-6y7q-e3ac
25
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.16.2
1
url pkg:maven/org.apache.struts/struts2-core@2.3.20
purl pkg:maven/org.apache.struts/struts2-core@2.3.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1xhe-mz8d-eyem
1
vulnerability VCID-2p29-qaqw-9fa9
2
vulnerability VCID-2qup-v76d-8bge
3
vulnerability VCID-3q92-5sz9-2kd3
4
vulnerability VCID-86yh-tym8-f3hh
5
vulnerability VCID-8huk-86a6-27cw
6
vulnerability VCID-8zze-44sk-audx
7
vulnerability VCID-aaet-jdfc-mbek
8
vulnerability VCID-ce3p-yaze-v7fy
9
vulnerability VCID-d7b9-rv1g-qkfp
10
vulnerability VCID-ee2d-r8vy-skhq
11
vulnerability VCID-ev69-3d1j-nuac
12
vulnerability VCID-f4kx-q41m-5qer
13
vulnerability VCID-fdat-drnp-yudv
14
vulnerability VCID-fmf4-k1py-g7fh
15
vulnerability VCID-h3mw-239q-cbgn
16
vulnerability VCID-hszd-513t-xucj
17
vulnerability VCID-jyrs-6kjh-3qfa
18
vulnerability VCID-n7x9-wj56-a7gr
19
vulnerability VCID-nb8f-hdtw-9fdk
20
vulnerability VCID-pjw9-sxen-b3cu
21
vulnerability VCID-q9p6-sxpv-g7gp
22
vulnerability VCID-t9vy-6y7q-e3ac
23
vulnerability VCID-vurd-7tee-e7a9
24
vulnerability VCID-ycjb-zszd-4ufy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.3.20
aliases CVE-2014-0113, GHSA-3c5c-xrq4-qhr8
risk_score 1.4
exploitability 2.0
weighted_severity 0.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zkdp-x1s4-jbbx
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.0.5