Not rated
CVE-2015-2992 Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability
Description
Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Struts | Versions not published |
References
- jvn.jp jvn.jp
- jvndb.jvn.jp jvndb.jvn.jp
- www.securityfocus.com www.securityfocus.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Apache Struts
The 33 CVEs of Apache Struts →
CVE-2026-104714
Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache…
Not rated
CVE-2026-104713
Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin
Not rated
CVE-2026-104712
Asymmetric resource consumption (amplification) vulnerability in Apache Struts
Not rated
CVE-2026-104711
Improper neutralization of special elements used in an expression language statement ('Expression Language Injection')…
Not rated