CVE-2025-68493

None

Open

TLP:CLEAR

Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue.

Details

EPSS Score ⓘ: 37.06%

98.4th percentile
Confidence: 90%
Published: Jan 11, 2026
Last Modified: Jul 15, 2026

Notes

0

Log in to add a note

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

0

Log in to add an opinion

No opinions yet. Be the first to assess this intelligence.