Class familyApache · Struts
Apache Struts input validation flaws, 2012–2018
5 Struts CVEs with CWE-20 weaknesses, 8 Jan 2012 to 22 Aug 2018. 5 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2012’12
1 2013’13
2014’14
2015’15
2016’16
2 2017’17
1 2018’18
In CISA KEVNot in KEV
20121 CVE, 1 in KEV
20131 CVE, 1 in KEV
20172 CVEs, 2 in KEV
20181 CVE, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2012-0391KEV | 8 Jan 2012 | Apache Struts 2 Improper Input Validation Vulnerability · fixed in 2.2.3.1 | Grouped by weakness | 69.8 |
| CVE-2013-2251KEV | 20 Jul 2013 | Apache Struts Improper Input Validation Vulnerability · fixed in 2.3.15.1 | Grouped by weakness | 69.9 |
| CVE-2017-5638KEV | 11 Mar 2017 | Apache Struts Remote Code Execution Vulnerability · fixed in 2.5.10.1 | Grouped by weakness | 79.9 |
| CVE-2017-9791KEV | 10 Jul 2017 | Apache Struts 1 Improper Input Validation Vulnerability | Grouped by weakness | 69.8 |
| CVE-2018-11776KEV | 22 Aug 2018 | Apache Struts Remote Code Execution Vulnerability · fixed in 2.5.17 | Grouped by weakness | 82.5 |