Read the docs

Opensymphony

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Opensymphony records in CISA KEV

No Opensymphony vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Xwork 4 records MEDIUM Webwork 2 records LOW

Records

2 records in Webwork · all components

TI-2011-01551 CVE-2011-1772 · GHSA-56f8-g68r-j699

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before…

Priority LOW 38

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors in…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.33346 Published 2011-05-13 Partial fix · 2.2.3 CWE-79
TI-2011-01813 CVE-2011-2088 · GHSA-9ccm-g362-2r35

XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork…

Priority LOW 32

XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive information about internal Java class paths via vectors involving an s:submit el…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0614 Published 2011-05-13 Partial fix · 2.2.2 CWE-200
Open these records in search →