16 Total advisories
16 Vulnerabilities
0 Malware
Dependency scanning
Check whether org.apache.struts.xwork:xwork-core is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
CRITICAL 9.8
CVE-2012-0391
Apache Struts Remote Java Code Execution
HIGH 8.1
CVE-2025-68493
Apache Struts 2 is Missing XML Validation
UNKNOWN
CVE-2013-2135
Arbitrary code execution in Apache Struts 2
UNKNOWN
CVE-2015-1831
Incomplete exclude pattern in Apache Struts
UNKNOWN
CVE-2012-4387
Denial of service in Apache Struts
UNKNOWN
CVE-2014-0094
ClassLoader manipulation in Apache Struts
UNKNOWN
CVE-2012-0838
Apache Struts Code injection due to conversion error
UNKNOWN
CVE-2012-0392
Apache Struts's CookieInterceptor component does not use the parameter-name whitelist
UNKNOWN
CVE-2013-1966
Arbitrary code execution in Apache Struts
UNKNOWN
CVE-2013-2134
Arbitrary code execution in Apache Struts 2
UNKNOWN
CVE-2012-0394
Apache Struts's DebuggingInterceptor component allows remote code execution in developer mode
UNKNOWN
CVE-2012-0393
Apache Struts's ParameterInterceptor component does not prevent access to public constructors
UNKNOWN
CVE-2011-2088
XWork in Apache Struts Reveals Sensitive Information
HIGH 7.5
CVE-2016-4433
Apache Struts Open Redirect
HIGH 8.1
CVE-2013-2115
Code injection in Apache Struts
HIGH 8.8
CVE-2016-4430
Apache Struts CSRF Vulnerability
Browse more Maven advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes