Denial Of Service (DoS)

🗓️ 09 Dec 2025 07:55:40Reported by Veracode Vulnerability DatabaseType

Apache Struts DoS from multipart request file leak causing temporary files not cleaned, exhausting server storage.

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts Vulnerabilities in IBM Library Support for Struts	9 Mar 202610:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Tivoli Netcool/OMNIbus_GUI (CVE-2019-17570, CVE-2025-64775)	26 Feb 202603:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 24 (4.2.0.24)	9 Apr 202610:21	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Apache Struts affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-64775)	21 Jul 202618:10	–	ibm
Atlassian	DoS (Denial of Service) Apache Struts Dependency in Bamboo Data Center	11 Mar 202616:55	–	atlassian
Atlassian	DoS (Denial of Service) org.apache.struts:struts2-core Dependency in Crowd Data Center and Server	19 Dec 202519:27	–	atlassian
Tenable Nessus	Atlassian Bamboo 9.6.x < 9.6.24 / 10.x < 10.2.16 / 11.x / 12.x < 12.1.3 Multiple Vulnerabilities	25 Mar 202600:00	–	nessus
Tenable Nessus	Apache Struts 2.0.0 <= 6.7.0 / 7.0.0 <= 7.0.3 Denial of Service (S2-068)	4 Dec 202500:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-64775	3 Dec 202500:00	–	nessus
BDU FSTEC	The vulnerability of the Apache Struts software platform, related to incomplete cleanup of temporary or auxiliary resources, allows attackers to cause service failures.	9 Dec 202500:00	–	bdu_fstec

Vulners

Node

apache struts2-coreRange2.0.5–6.8.0-atlassian-1java

apache struts2-coreRange7.0.0-atlassian-m01–7.0.3java

apache struts2-coreRange6.0.0–6.7.4-atlassian-1java

apache struts2-coreRange7.0.0–7.0.3java

apache struts2-coreRange2.0.0–2.3.37java

apache struts2-coreRange2.5.0–2.5.33java

Source	Link
github	www.github.com/apache/struts/commit/831568929cfba700f790f6ebe6e335f9f33fb468
openwall	www.openwall.com/lists/oss-security/2025/12/01/2
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-64775
cwiki	www.cwiki.apache.org/confluence/display/WW/S2-068
github	www.github.com/apache/struts

25 Jul 2026 17:49Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.01486

SSVC