CVE-2015-2992

CVE-2015-2992: vulnerability in Apache Struts

Published 27 Feb 2020 · Updated 06 Aug 2024

Follow this CVE + Monitor Apache Struts + Monitor org.apache.struts:struts2-core

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 5.8%

Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.

Affected products

Apache Software Foundation · Apache Struts

Related CVEs — Apache Struts

In the same product, most dangerous first.

CVE-2017-5638CRITICALCVE-2017-5638EPSS 100.0%KEV CVE-2018-11776HIGHCVE-2018-11776EPSS 100.0%KEV CVE-2017-9805HIGHCVE-2017-9805EPSS 99.4%KEV CVE-2017-9791CRITICALCVE-2017-9791EPSS 98.9%KEV CVE-2020-17530CRITICALCVE-2020-17530EPSS 96.3%KEV CVE-2017-12611—CVE-2017-12611EPSS 87.1%

References

http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000124.html http://jvn.jp/en/jp/JVN88408929/index.html https://security.netapp.com/advisory/ntap-20200330-0001/http://www.securityfocus.com/bid/76624