Apache Software Foundation / Apache Struts

67 vulnerabilities across affected versions.

CVE-2017-5638CRITICAL9.82.3.x before 2.3.32 – 2.3.x before 2.3.32

CVE-2017-5638CRITICAL9.82.5.x before 2.5.10.1 – 2.5.x before 2.5.10.1

CVE-2017-9791CRITICAL9.82.3.x series – 2.3.x series

CVE-2017-9791CRITICAL9.82.1.x series – 2.1.x series

CVE-2020-17530CRITICAL9.8Struts 2.0.0 - Struts 2.5.25 – Struts 2.0.0 - Struts 2.5.25

CVE-2026-104711CRITICAL9.86.0.0 – 6.11.0

CVE-2026-104711CRITICAL9.87.0.0 – 7.3.0

CVE-2026-104711CRITICAL9.82.0.0 – 2.3.37

CVE-2026-104711CRITICAL9.82.5.0 – 2.5.33

CVE-2026-104714HIGH8.82.5.0 – 2.5.33

CVE-2026-104714HIGH8.87.0.0 – 7.3.0

CVE-2026-104714HIGH8.86.0.0 – 6.11.0

CVE-2026-104714HIGH8.82.0.0 – 2.3.37

CVE-2025-66675HIGH8.27.0.0 – 7.0.*

CVE-2025-66675HIGH8.22.0.0 – 6.7.*

CVE-2017-9805HIGH8.1Apache Struts before 2.3.34 and 2.5.x before 2.5.13 – Apache Struts before 2.3.34 and 2.5.x before 2.5.13

CVE-2018-11776HIGH8.12.3 to 2.3.34 – 2.3 to 2.3.34

CVE-2018-11776HIGH8.12.5 to 2.5.16 – 2.5 to 2.5.16

CVE-2023-41835HIGH7.56.1.2.1 – 6.3.0

CVE-2023-41835HIGH7.52.0.0 – 2.5.31

CVE-2025-64775HIGH7.57.0.0 – 7.0.3

CVE-2025-64775HIGH7.52.0.0 – 6.7.0

CVE-2026-104712HIGH7.52.5.14 – 2.5.33

CVE-2026-104712HIGH7.57.0.0 – 7.3.0

CVE-2026-104712HIGH7.56.0.0 – 6.11.0

CVE-2026-73633HIGH7.52.1.8 – 2.3.37

CVE-2026-73633HIGH7.52.5.0 – 2.5.33

CVE-2026-73633HIGH7.57.0.0 – 7.2.1

CVE-2026-73633HIGH7.56.0.0 – 6.10.0

CVE-2026-73634HIGH7.57.0.0 – 7.2.1

CVE-2026-73634HIGH7.56.0.0 – 6.10.0

CVE-2026-73635HIGH7.57.0.0 – 7.2.1

CVE-2026-73635HIGH7.56.0.0 – 6.10.0

CVE-2026-73635HIGH7.52.0.0 – 2.3.37

CVE-2026-73635HIGH7.52.5.0 – 2.5.33

CVE-2025-68493HIGH7.12.0.0 – 2.2.1

CVE-2025-68493HIGH7.12.2.1 – 6.1.0

CVE-2026-104713MEDIUM6.57.0.0 – 7.3.0

CVE-2026-104713MEDIUM6.56.0.0 – 6.11.0

CVE-2026-104713MEDIUM6.52.5.0 – 2.5.33

CVE-2026-104713MEDIUM6.52.1.8 – 2.3.37

CVE-2023-34149MEDIUM4.30 – 2.5.30

CVE-2023-34149MEDIUM4.30 – 6.1.2

CVE-2023-34396MEDIUM4.30 – 6.1.2

CVE-2023-34396MEDIUM4.30 – 2.5.30

CVE-2026-73631MEDIUM4.37.2.1 – 7.2.1

CVE-2026-73632MEDIUM4.37.2.1 – 7.2.1

CVE-2015-2992UNRATEDbefore 2.3.20 – before 2.3.20

CVE-2016-6795UNRATED2.3.x before 2.3.31 – 2.3.x before 2.3.31

CVE-2016-6795UNRATED2.5.x before 2.5.5 – 2.5.x before 2.5.5