Vulnerability Database

320,453

Total vulnerabilities in the database

CVE-2025-68493

Missing XML Validation vulnerability in Apache Struts, Apache Struts.

This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0.

Users are recommended to upgrade to version 6.1.1, which fixes the issue.

  • Published: Jan 11, 2026
  • Updated: Jan 13, 2026
  • CVE: CVE-2025-68493
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.1
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H