CVE-2015-5169: Apache Struts

Medium severity, CVSS 6.1. EPSS: 7.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20.

Affected products

• Apache Struts: from 2.0.0, up to and including 2.3.16.3

Published 2017-09-25. Last modified 2026-06-17.