78 CVEs
7 in CISA KEV
org.apache.struts Vulnerabilities
CVE security advisories and vulnerability history for org.apache.struts.
78
Total CVEs
Published
7
In CISA KEV
Exploited in the wild
32
Public exploits
With known exploit
8.2
Avg CVSS
2005–2026
Overview
org.apache.struts has 78 published CVE records since 2005, of which 7 are in CISA's Known Exploited Vulnerabilities catalog and 32 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.
This page aggregates every publicly disclosed vulnerability (CVE) affecting org.apache.struts products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.