Denial Of Service (DoS)

🗓️ 09 Dec 2025 07:55:40Reported by Veracode Vulnerability DatabaseType

Apache Struts DoS from multipart request file leak causing temporary files not cleaned, exhausting server storage.

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts Vulnerabilities in IBM Library Support for Struts	9 Mar 202610:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus_GUI (CVE-2019-17570, CVE-2025-64775)	26 Feb 202603:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 24 (4.2.0.24)	9 Apr 202610:21	–	ibm
Atlassian	DoS (Denial of Service) Apache Struts Dependency in Bamboo Data Center	11 Mar 202616:55	–	atlassian
Atlassian	DoS (Denial of Service) org.apache.struts:struts2-core Dependency in Crowd Data Center and Server	19 Dec 202519:27	–	atlassian
Tenable Nessus	Atlassian Bamboo 9.6.x < 9.6.24 / 10.x < 10.2.16 / 11.x / 12.x < 12.1.3 Multiple Vulnerabilities	25 Mar 202600:00	–	nessus
Tenable Nessus	Apache Struts 2.0.0 <= 6.7.0 / 7.0.0 <= 7.0.3 Denial of Service (S2-068)	4 Dec 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-64775	3 Dec 202500:00	–	nessus
Circl	CVE-2025-64775	1 Dec 202514:01	–	circl
CNNVD	Apache Struts 安全漏洞	1 Dec 202500:00	–	cnnvd

Vulners

Node

apache struts2-coreRange2.0.5–6.8.0-atlassian-1java

apache struts2-coreRange7.0.0-atlassian-m01–7.0.3java

apache struts2-coreRange6.0.0–6.7.4-atlassian-1java

apache struts2-coreRange7.0.0–7.0.3java

apache struts2-coreRange2.0.0–2.3.37java

apache struts2-coreRange2.5.0–2.5.33java

Source	Link
github	www.github.com/apache/struts/commit/831568929cfba700f790f6ebe6e335f9f33fb468
openwall	www.openwall.com/lists/oss-security/2025/12/01/2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-64775
cwiki	www.cwiki.apache.org/confluence/display/WW/S2-068
github	www.github.com/apache/struts

03 Jun 2026 09:55Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.00171

SSVC