CVE-2015-2992

Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability

published February 27, 2020

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05757 · 93.0th percentile
Published
2020-02-27T17:45Z
EPSS history
Timeline
  • 27 FEB 17:45Z
    Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability
    cvelistv5