CVE-2025-68493
Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue.
| CWE | CWE-611 |
| Vendor | apache software foundation |
| Product | apache struts |
| Published | Jan 11, 2026 |
| Last Updated | Mar 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for apache software foundation apache struts
Be the first to know when new high vulnerabilities affecting apache software foundation apache struts are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apache Software Foundation / Apache Struts
2.0.0 < 2.2.1
Apache Software Foundation / Apache Struts
2.2.1 ≤ 6.1.0