Medium severity6.1NVD Advisory· Published Sep 25, 2017· Updated May 13, 2026
CVE-2015-5169
CVE-2015-5169
Description
Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.struts:struts2-coreMaven | < 2.3.20 | 2.3.20 |
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
9- jvn.jp/en/jp/JVN95989300/index.htmlnvdThird Party AdvisoryVDB EntryWEB
- jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000125.htmlnvdThird Party AdvisoryVDB EntryWEB
- www.securityfocus.com/bid/76625nvdThird Party AdvisoryVDB Entry
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-vwhv-j36g-5rm8ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2015-5169ghsaADVISORY
- security.netapp.com/advisory/ntap-20180629-0003/nvdThird Party Advisory
- struts.apache.org/docs/s2-025.htmlnvdVendor AdvisoryWEB
- security.netapp.com/advisory/ntap-20180629-0003ghsaWEB
News mentions
0No linked articles in our index yet.