16 CVEs
1 in CISA KEV
org.apache.struts.xwork Vulnerabilities
CVE security advisories and vulnerability history for org.apache.struts.xwork.
16
Total CVEs
Published
1
In CISA KEV
Exploited in the wild
8
Public exploits
With known exploit
9.1
Avg CVSS
2011–2026
Overview
org.apache.struts.xwork has 16 published CVE records since 2011, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 9.1.
This page aggregates every publicly disclosed vulnerability (CVE) affecting org.apache.struts.xwork products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.