2 matches found
CVE-2015-2992
Apache Struts before 2.3.20 has a cross-site scripting XSS vulnerability...
6.1AI score0.05757EPSS
SaveExploits0References4
CVE-2015-2992
Apache Struts CVE-2015-2992 is an XSS vulnerability in Struts before 2.3.20, caused by improper validation of user input when JSP files are accessed directly. Exploitation could allow a remote attacker to run scripts in the victim’s browser and steal cookies. Affected products/versions include St...
6.1CVSS5.8AI score0.05757EPSS
SaveExploits0References4Affected Software1
20