Vulners
Lucene search
CVE-2025-68493
🗓️ 11 Jan 2026 13:05:36Reported by apacheType 
cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 385 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 26 |
|---|---|---|---|---|
 | Security Bulletin: Remediation of Multiple Apache Struts Vulnerabilities in IBM Library Support for Struts | 9 Mar 202610:35 | – | ibm |
 | CVE-2025-68493 impact on Bamboo | 13 Feb 202611:45 | – | atlassian |
| Missing XML Validation vulnerability in Apache Struts Dependency in Bamboo Data Center | 11 Mar 202613:10 | – | atlassian |
 | Atlassian Bamboo 9.6.x < 9.6.24 / 10.x < 10.2.16 / 11.x / 12.x < 12.1.3 Multiple Vulnerabilities | 25 Mar 202600:00 | – | nessus |
| Apache Struts 2.x <= 2.3.37 / 2.5.x <= 2.5.33 / 6.x < 6.1.1 XML External Entity Injection in XWork (S2-069) | 16 Jan 202600:00 | – | nessus |
 | Exploit for Missing XML Validation in Apache Struts | 4 Feb 202601:57 | – | githubexploit |
 | CVE-2025-68493 | 11 Jan 202615:34 | – | circl |
 | Apache Struts 安全漏洞 | 11 Jan 202600:00 | – | cnnvd |
 | CVE-2025-68493 Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component | 11 Jan 202613:05 | – | cvelist |
 | EUVD-2026-1898 | 11 Jan 202613:05 | – | euvd |
10
[
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "com.opensymphony:xwork",
"product": "Apache Struts",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThan": "2.2.1",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://repo.maven.apache.org/maven2",
"defaultStatus": "unaffected",
"packageName": "org.apache.struts.xwork:xwork-core",
"product": "Apache Struts",
"vendor": "Apache Software Foundation",
"versions": [
{
"lessThanOrEqual": "6.1.0",
"status": "affected",
"version": "2.2.1",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| XML payload | request body | struts2-xml-parser/xmlParserNoDtdParse | XXE via XML parser in Struts2 XML processing path | CWE-611 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Mar 2026 16:16Current
6.6Medium risk
Vulners AI Score6.6
CVSS 3.18.1
EPSS0.00033
SSVC