← All advisories

Medium severity6.1NVD Advisory· Published Sep 25, 2017· Updated Jun 17, 2026

CVE-2015-5169

CVE-2015-5169

Description

Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.apache.struts:struts2-coreMaven	< 2.3.20	2.3.20

Affected products

2

Apache/Struts
cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:*
Range: >=2.0.0,<=2.3.16.3
ghsa-coords
pkg:maven/org.apache.struts/struts2-core
Range: < 2.3.20

Patches

Vulnerability mechanics

References

9

jvn.jp/en/jp/JVN95989300/index.htmlnvdThird Party AdvisoryVDB EntryWEB
jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000125.htmlnvdThird Party AdvisoryVDB EntryWEB
www.securityfocus.com/bid/76625nvdThird Party AdvisoryVDB Entry
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-vwhv-j36g-5rm8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2015-5169ghsaADVISORY
security.netapp.com/advisory/ntap-20180629-0003/nvdThird Party Advisory
struts.apache.org/docs/s2-025.htmlnvdVendor AdvisoryWEB
security.netapp.com/advisory/ntap-20180629-0003ghsaWEB

News mentions

0

No linked articles in our index yet.