K000158954: Apache Struts vulnerability CVE-2025-64775

🗓️ 31 Dec 2025 06:25:55Reported by f5Type

f5🔗 my.f5.com👁 11 Views

Apache Struts Denial of Service and file leak in multipart processing; upgrade to six point eight or seven point one one.

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts Vulnerabilities in IBM Library Support for Struts	9 Mar 202610:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus_GUI (CVE-2019-17570, CVE-2025-64775)	26 Feb 202603:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 24 (4.2.0.24)	9 Apr 202610:21	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-64775)	21 Jul 202618:10	–	ibm
Atlassian	DoS (Denial of Service) Apache Struts Dependency in Bamboo Data Center	11 Mar 202616:55	–	atlassian
Atlassian	DoS (Denial of Service) org.apache.struts:struts2-core Dependency in Crowd Data Center and Server	19 Dec 202519:27	–	atlassian
Tenable Nessus	Atlassian Bamboo 9.6.x < 9.6.24 / 10.x < 10.2.16 / 11.x / 12.x < 12.1.3 Multiple Vulnerabilities	25 Mar 202600:00	–	nessus
Tenable Nessus	Apache Struts 2.0.0 <= 6.7.0 / 7.0.0 <= 7.0.3 Denial of Service (S2-068)	4 Dec 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-64775	3 Dec 202500:00	–	nessus
BDU FSTEC	The vulnerability of the Apache Struts software platform, related to incomplete cleanup of temporary or auxiliary resources, allows attackers to cause service failures.	9 Dec 202500:00	–	bdu_fstec

31 Dec 2025 06:25Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.01456

SSVC