Known vulnerabilities in Apache Foundation Apache Struts 2.5.17
1.3.9
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.8
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2
1.1
1.0.2
1.0.1
1.0
6.8.0
7.1.1
7.0.3
7.0.0
6.7.0
6.6.1
6.6.0
1.2.9-162.163.2
1.2.9-198.2
1.2.9-108.2
1.2.9-162.31.1
1.2.9
1.2.7
6.4.0
2.5.33
6.3.0.2
6.1.2.2
2.5.32
6.3.0.1
6.3.0
2.5.31
6.2.0
2.5.30.1
6.1.2.1
6.1.2
6.1.1
6.0.3
6.0.0
2.5.30
2.5.29
2.5.28.3
2.5.28.2
2.5.28.1
2.5.28
2.5.27
2.5.26
2.5.25
2.5.22
2.5.20
2.3.33
1.3.10
2.5.18
2.3.36
2.5.17
2.3.35
2.5.16
-
2.5.14.1
2.5.14
2.3.34
2.5.13
2.5.12
2.1.1
2.2.0
2.2.2
2.3.5
2.3.6
2.3.9
2.3.10
2.3.11
2.3.13
2.3.16.2
2.3.16.3
2.3.17
2.3.19
2.3.21
2.3.22
2.3.23
2.3.24.2
2.3.25
2.3.26
2.3.27
2.3.29
2.3.31
2.3.32
2.3.2
2.5.10.1
2.5.10
2.5.9
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5
2.3.16.1
2.3.16
2.3.15.3
2.3.15.2
2.3.15.1
2.3.15
2.3.14.3
2.3.14.2
2.3.14.1
2.3.14
2.3.12
2.3.8
2.3.7
2.3.4.1
2.3.4
2.3.3
2.3.1.2
2.3.1.1
2.3.1
2.2.3.1
2.2.3
2.2.1.1
2.2.1
2.1.8.1
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.0
2.0.14
2.0.13
2.0.12
2.0.11.2
2.0.11.1
2.0.11
2.0.10
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
2.3.30
2.3.28.1
2.3.28
2.3.24.3
2.3.24.1
2.3.24
2.3.20.3
2.3.20.2
2.3.20.1
2.3.20
Security bulletins (13)
| Secuity bulletin | Severity | Status | Published |
|---|---|---|---|
| SB2026011214: XXE in Apache Struts | Medium | 12.01.2026 | |
| SB2025120157: Denial of service in Apache Struts | Medium | 01.12.2025 | |
| SB2024121136: Remote code execution in Apache Struts | High | 11.12.2024 | |
| SB2023120703: Remote code execution via file upload in Apache Struts | Critical | 07.12.2023 | |
| SB2023091364: Denial of service in Apache Struts | Medium | 13.09.2023 | |
| SB2023061351: Multiple DoS vulnerabilities in Apache Struts | Medium | 13.06.2023 | |
| SB2022041218: Remote code execution in Apache Struts | High | 12.04.2022 | |
| SB2022010604: Apache Struts update for Log4j library | Medium | 06.01.2022 | |
| SB2022010603: Denial of service in Apache Struts Log4j library | Medium | 06.01.2022 | |
| SB2022010602: Remote code execution in Apache Struts (Apache Log4j component) | High | 06.01.2022 | |
| SB2020120801: Remote code execution in Apache Struts | High | 08.12.2020 | |
| SB2020081408: Multiple vulnerabilities in Apache Struts | High | 14.08.2020 | |
| SB2018110601: Remote code execution in Apache Struts | High | 06.11.2018 |