Product by Apache Software Foundation

    Apache Struts

    99 known vulnerabilities in Apache Struts (Apache Software Foundation), 9 of them actively exploited (CISA KEV).

    Key figures

    99

    Vulnerabilities

    9

    Actively exploited (KEV)

    1

    Used by ransomware

    21

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Apache Struts (Apache Software Foundation)
    SeverityCVETitleCVSSPublished
    CriticalCVE-2017-5638

    Apache Struts Remote Code Execution Vulnerability

    In CISA KEVRansomware

    		9.8
    CriticalCVE-2013-2251

    Apache Struts Improper Input Validation Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2017-9791

    Apache Struts 1 Improper Input Validation Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2020-17530

    Apache Struts Remote Code Execution Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2012-0391

    Apache Struts 2 Improper Input Validation Vulnerability

    In CISA KEV

    		9.8
    CriticalCVE-2018-11776

    Apache Struts Remote Code Execution Vulnerability

    In CISA KEV

    		8.1
    CriticalCVE-2017-9805

    Apache Struts Deserialization of Untrusted Data Vulnerability

    In CISA KEV

    		8.1
    CriticalCVE-2016-3081

    Apache Struts Command Injection Vulnerability

    In CISA KEV

    		8.1
    CriticalCVE-2006-1547

    Apache Struts 1 ActionForm Denial-of-Service Vulnerability

    In CISA KEV

    		7.5
    CriticalCVE-2024-53677

    Apache Struts: Remote Code Execution

    		9.8
    CriticalCVE-2023-50164

    Apache Struts: File upload component had a directory traversal vulnerability

    		9.8
    HighCVE-2025-68493

    Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component

    		8.1
    CriticalCVE-2021-31805

    Apache Struts: Expression Language Injection

    		9.8
    CriticalCVE-2019-0230

    Apache Struts: Remote Code Execution

    		9.8
    CriticalCVE-2011-3923

    Apache Struts: security vulnerability

    		9.8
    CriticalCVE-2017-12611

    Apache Struts: Remote Code Execution

    		9.8
    CriticalCVE-2016-3087

    Apache Struts: Code Execution

    		9.8
    CriticalCVE-2016-3082

    Apache Struts: Code Execution

    		9.8
    CriticalCVE-2016-4438

    Apache Struts: Code Execution

    		9.8
    HighCVE-2012-1592

    Libstruts1.2-java: Code Execution

    		8.8
    CriticalCVE-2016-6795

    Apache Struts: Path Traversal

    		9.8
    HighCVE-2013-2115

    Apache Struts: security vulnerability

    		8.1
    CriticalCVE-2016-4436

    Apache Struts: security vulnerability

    		9.8
    HighCVE-2016-1182

    Apache Struts: Cross-Site Scripting (XSS)

    		8.2
    HighCVE-2016-0785

    Apache Struts: Code Execution

    		8.8

    All vulnerabilities in search

    All products by Apache Software Foundation