English
EN
Français
FR
Language
English
EN
Français
FR

CVE Vulnerabilities

Posts & Pages

No results found for ""

Try different keywords or check spelling

Search in CVE database, posts & pages • Press ESC to close

DNA View

High Severity Vulnerability

This vulnerability has been rated as High severity. Immediate action is recommended.

CVE-2025-64775

High
Low Medium High Critical
7.5
CVSS Score
Published: Dec 01, 2025
Last Modified: Jan 26, 2026
CWE: CWE-459

Vulnerability Description

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.

This issue affects Apache Struts: from 2.0.0 through 6.7.0, from 7.0.0 through 7.0.3.

Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.

CVSS Metrics

Common Vulnerability Scoring System

Vector String:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
N
Attack Complexity
L
Privileges Required
N
User Interaction
N
Scope
U
Confidentiality
N
Integrity
N
Availability
H

Known Affected Software

152 configuration(s) from 1 vendor(s)

struts
Version:
2.0.1
CPE:
cpe:2.3:a:apache:struts:2.0.1:*:*:*:*:*:*:*
struts
Version:
2.5.0
CPE:
cpe:2.3:a:apache:struts:2.5.0:*:*:*:*:*:*:*
struts
Version:
2.3.15.1
CPE:
cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*
struts
Version:
2.5.32
CPE:
cpe:2.3:a:apache:struts:2.5.32:*:*:*:*:*:*:*
struts
Version:
2.5.22
CPE:
cpe:2.3:a:apache:struts:2.5.22:*:*:*:*:*:*:*
struts
Version:
2.0.10
CPE:
cpe:2.3:a:apache:struts:2.0.10:*:*:*:*:*:*:*
struts
Version:
2.5.13
CPE:
cpe:2.3:a:apache:struts:2.5.13:*:*:*:*:*:*:*
struts
Version:
2.3.31
CPE:
cpe:2.3:a:apache:struts:2.3.31:*:*:*:*:*:*:*
struts
Version:
2.5.9
CPE:
cpe:2.3:a:apache:struts:2.5.9:*:*:*:*:*:*:*
struts
Version:
2.3.0
CPE:
cpe:2.3:a:apache:struts:2.3.0:*:*:*:*:*:*:*
struts
Version:
2.5.4
CPE:
cpe:2.3:a:apache:struts:2.5.4:*:*:*:*:*:*:*
struts
Version:
2.1.3
CPE:
cpe:2.3:a:apache:struts:2.1.3:*:*:*:*:*:*:*
struts
Version:
2.5.27
CPE:
cpe:2.3:a:apache:struts:2.5.27:*:*:*:*:*:*:*
struts
Version:
2.3.15
CPE:
cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*
struts
Version:
2.0.14
CPE:
cpe:2.3:a:apache:struts:2.0.14:*:*:*:*:*:*:*
struts
Version:
2.0.11.2
CPE:
cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*
struts
Version:
2.5.1
CPE:
cpe:2.3:a:apache:struts:2.5.1:*:*:*:*:*:*:*
struts
Version:
2.3.11
CPE:
cpe:2.3:a:apache:struts:2.3.11:*:*:*:*:*:*:*
struts
Version:
2.1.1
CPE:
cpe:2.3:a:apache:struts:2.1.1:*:*:*:*:*:*:*
struts
Version:
2.5.11
CPE:
cpe:2.3:a:apache:struts:2.5.11:*:*:*:*:*:*:*
struts
Version:
2.2.1.1
CPE:
cpe:2.3:a:apache:struts:2.2.1.1:*:*:*:*:*:*:*
struts
Version:
2.3.21
CPE:
cpe:2.3:a:apache:struts:2.3.21:*:*:*:*:*:*:*
struts
Version:
2.3.13
CPE:
cpe:2.3:a:apache:struts:2.3.13:*:*:*:*:*:*:*
struts
Version:
2.1.8
CPE:
cpe:2.3:a:apache:struts:2.1.8:*:*:*:*:*:*:*
struts
Version:
2.5.5
CPE:
cpe:2.3:a:apache:struts:2.5.5:*:*:*:*:*:*:*
struts
Version:
2.2.3
CPE:
cpe:2.3:a:apache:struts:2.2.3:*:*:*:*:*:*:*
struts
Version:
6.3.0.2
CPE:
cpe:2.3:a:apache:struts:6.3.0.2:*:*:*:*:*:*:*
struts
Version:
6.7.4
CPE:
cpe:2.3:a:apache:struts:6.7.4:*:*:*:*:*:*:*
struts
Version:
6.1.2.2
CPE:
cpe:2.3:a:apache:struts:6.1.2.2:*:*:*:*:*:*:*
struts
Version:
2.3.24
CPE:
cpe:2.3:a:apache:struts:2.3.24:*:*:*:*:*:*:*
struts
Version:
2.0.4
CPE:
cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*
struts
Version:
7.0.0
CPE:
cpe:2.3:a:apache:struts:7.0.0:-:*:*:*:*:*:*
struts
Version:
6.0.3
CPE:
cpe:2.3:a:apache:struts:6.0.3:*:*:*:*:*:*:*
struts
Version:
2.5.29
CPE:
cpe:2.3:a:apache:struts:2.5.29:*:*:*:*:*:*:*
struts
Version:
2.3.1
CPE:
cpe:2.3:a:apache:struts:2.3.1:*:*:*:*:*:*:*
struts
Version:
2.5.33
CPE:
cpe:2.3:a:apache:struts:2.5.33:*:*:*:*:*:*:*
struts
Version:
6.6.0
CPE:
cpe:2.3:a:apache:struts:6.6.0:*:*:*:*:*:*:*
struts
Version:
2.0.9
CPE:
cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*
struts
Version:
2.0.13
CPE:
cpe:2.3:a:apache:struts:2.0.13:*:*:*:*:*:*:*
struts
Version:
2.1.5
CPE:
cpe:2.3:a:apache:struts:2.1.5:*:*:*:*:*:*:*
struts
Version:
2.3.32
CPE:
cpe:2.3:a:apache:struts:2.3.32:*:*:*:*:*:*:*
struts
Version:
2.3.4
CPE:
cpe:2.3:a:apache:struts:2.3.4:*:*:*:*:*:*:*
struts
Version:
2.5.10
CPE:
cpe:2.3:a:apache:struts:2.5.10:*:*:*:*:*:*:*
struts
Version:
2.0.0
CPE:
cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*
struts
Version:
2.3.6
CPE:
cpe:2.3:a:apache:struts:2.3.6:*:*:*:*:*:*:*
struts
Version:
6.4.0
CPE:
cpe:2.3:a:apache:struts:6.4.0:*:*:*:*:*:*:*
struts
Version:
6.1.2.1
CPE:
cpe:2.3:a:apache:struts:6.1.2.1:*:*:*:*:*:*:*
struts
Version:
6.0.0
CPE:
cpe:2.3:a:apache:struts:6.0.0:-:*:*:*:*:*:*
struts
Version:
2.1.6
CPE:
cpe:2.3:a:apache:struts:2.1.6:*:*:*:*:*:*:*
struts
Version:
2.3.15.3
CPE:
cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*
struts
Version:
2.3.29
CPE:
cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*
struts
Version:
2.3.12
CPE:
cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*
struts
Version:
2.5.15
CPE:
cpe:2.3:a:apache:struts:2.5.15:*:*:*:*:*:*:*
struts
Version:
2.1.0
CPE:
cpe:2.3:a:apache:struts:2.1.0:*:*:*:*:*:*:*
struts
Version:
2.3.35
CPE:
cpe:2.3:a:apache:struts:2.3.35:*:*:*:*:*:*:*
struts
Version:
2.3.24.2
CPE:
cpe:2.3:a:apache:struts:2.3.24.2:*:*:*:*:*:*:*
struts
Version:
2.5.18
CPE:
cpe:2.3:a:apache:struts:2.5.18:*:*:*:*:*:*:*
struts
Version:
2.5.28
CPE:
cpe:2.3:a:apache:struts:2.5.28:*:*:*:*:*:*:*
struts
Version:
2.3.16.3
CPE:
cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*
struts
Version:
2.5
CPE:
cpe:2.3:a:apache:struts:2.5:beta2:*:*:*:*:*:*
struts
Version:
2.3.26
CPE:
cpe:2.3:a:apache:struts:2.3.26:*:*:*:*:*:*:*
struts
Version:
2.0.2
CPE:
cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*
struts
Version:
2.5.14.1
CPE:
cpe:2.3:a:apache:struts:2.5.14.1:*:*:*:*:*:*:*
struts
Version:
2.5.31
CPE:
cpe:2.3:a:apache:struts:2.5.31:*:*:*:*:*:*:*
struts
Version:
2.3.4.1
CPE:
cpe:2.3:a:apache:struts:2.3.4.1:*:*:*:*:*:*:*
struts
Version:
6.0.2
CPE:
cpe:2.3:a:apache:struts:6.0.2:*:*:*:*:*:*:*
struts
Version:
6.3.0.1
CPE:
cpe:2.3:a:apache:struts:6.3.0.1:*:*:*:*:*:*:*
struts
Version:
2.3.25
CPE:
cpe:2.3:a:apache:struts:2.3.25:*:*:*:*:*:*:*
struts
Version:
2.2.3.1
CPE:
cpe:2.3:a:apache:struts:2.2.3.1:*:*:*:*:*:*:*
struts
Version:
2.5.17
CPE:
cpe:2.3:a:apache:struts:2.5.17:*:*:*:*:*:*:*
struts
Version:
2.5.12
CPE:
cpe:2.3:a:apache:struts:2.5.12:*:*:*:*:*:*:*
struts
Version:
2.5.23
CPE:
cpe:2.3:a:apache:struts:2.5.23:*:*:*:*:*:*:*
struts
Version:
2.3.10
CPE:
cpe:2.3:a:apache:struts:2.3.10:*:*:*:*:*:*:*
struts
Version:
2.3.24.3
CPE:
cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*
struts
Version:
2.1.8.1
CPE:
cpe:2.3:a:apache:struts:2.1.8.1:*:*:*:*:*:*:*
struts
Version:
2.5.2
CPE:
cpe:2.3:a:apache:struts:2.5.2:*:*:*:*:*:*:*
struts
Version:
2.5.21
CPE:
cpe:2.3:a:apache:struts:2.5.21:*:*:*:*:*:*:*
struts
Version:
2.5.19
CPE:
cpe:2.3:a:apache:struts:2.5.19:*:*:*:*:*:*:*
struts
Version:
6.3.0
CPE:
cpe:2.3:a:apache:struts:6.3.0:-:*:*:*:*:*:*
struts
Version:
2.0.5
CPE:
cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*
struts
Version:
2.3.9
CPE:
cpe:2.3:a:apache:struts:2.3.9:*:*:*:*:*:*:*
struts
Version:
7.0.2
CPE:
cpe:2.3:a:apache:struts:7.0.2:*:*:*:*:*:*:*
struts
Version:
6.6.1
CPE:
cpe:2.3:a:apache:struts:6.6.1:*:*:*:*:*:*:*
struts
Version:
2.0.12
CPE:
cpe:2.3:a:apache:struts:2.0.12:*:*:*:*:*:*:*
struts
Version:
2.3.14.1
CPE:
cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*
struts
Version:
2.1
CPE:
cpe:2.3:a:apache:struts:2.1:*:*:*:*:*:*:*
struts
Version:
2.3.30
CPE:
cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*
struts
Version:
2.3.19
CPE:
cpe:2.3:a:apache:struts:2.3.19:*:*:*:*:*:*:*
struts
Version:
2.5.24
CPE:
cpe:2.3:a:apache:struts:2.5.24:*:*:*:*:*:*:*
struts
Version:
2.3.37
CPE:
cpe:2.3:a:apache:struts:2.3.37:*:*:*:*:*:*:*
struts
Version:
6.1.1
CPE:
cpe:2.3:a:apache:struts:6.1.1:*:*:*:*:*:*:*
struts
Version:
6.7.1
CPE:
cpe:2.3:a:apache:struts:6.7.1:*:*:*:*:*:*:*
struts
Version:
2.0.11
CPE:
cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*
struts
Version:
2.5.16
CPE:
cpe:2.3:a:apache:struts:2.5.16:*:*:*:*:*:*:*
struts
Version:
2.5.3
CPE:
cpe:2.3:a:apache:struts:2.5.3:*:*:*:*:*:*:*
struts
Version:
2.3.22
CPE:
cpe:2.3:a:apache:struts:2.3.22:*:*:*:*:*:*:*
struts
Version:
7.0.1
CPE:
cpe:2.3:a:apache:struts:7.0.1:*:*:*:*:*:*:*
struts
Version:
2.5.30
CPE:
cpe:2.3:a:apache:struts:2.5.30:*:*:*:*:*:*:*
struts
Version:
2.3.16.2
CPE:
cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*
struts
Version:
2.3.36
CPE:
cpe:2.3:a:apache:struts:2.3.36:*:*:*:*:*:*:*
struts
Version:
6.7.2
CPE:
cpe:2.3:a:apache:struts:6.7.2:*:*:*:*:*:*:*
struts
Version:
6.1.0
CPE:
cpe:2.3:a:apache:struts:6.1.0:*:*:*:*:*:*:*
struts
Version:
2.0.8
CPE:
cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*
struts
Version:
2.5.26
CPE:
cpe:2.3:a:apache:struts:2.5.26:*:*:*:*:*:*:*
struts
Version:
2.3.20.1
CPE:
cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*
struts
Version:
2.3.3
CPE:
cpe:2.3:a:apache:struts:2.3.3:*:*:*:*:*:*:*
struts
Version:
2.3.8
CPE:
cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*
struts
Version:
2.3.17
CPE:
cpe:2.3:a:apache:struts:2.3.17:*:*:*:*:*:*:*
struts
Version:
6.2.0
CPE:
cpe:2.3:a:apache:struts:6.2.0:*:*:*:*:*:*:*
struts
Version:
2.3.15.2
CPE:
cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*
struts
Version:
2.3.14
CPE:
cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*
struts
Version:
2.3.14.3
CPE:
cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*
struts
Version:
6.7.0
CPE:
cpe:2.3:a:apache:struts:6.7.0:*:*:*:*:*:*:*
struts
Version:
2.0.7
CPE:
cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*
struts
Version:
2.3.20.2
CPE:
cpe:2.3:a:apache:struts:2.3.20.2:*:*:*:*:*:*:*
struts
Version:
7.1.0
CPE:
cpe:2.3:a:apache:struts:7.1.0:*:*:*:*:*:*:*
struts
Version:
2.2.1
CPE:
cpe:2.3:a:apache:struts:2.2.1:*:*:*:*:*:*:*
struts
Version:
2.3.28.1
CPE:
cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*
struts
Version:
2.3.20
CPE:
cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*
struts
Version:
2.3.28
CPE:
cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*
struts
Version:
6.5.0
CPE:
cpe:2.3:a:apache:struts:6.5.0:*:*:*:*:*:*:*
struts
Version:
2.3.33
CPE:
cpe:2.3:a:apache:struts:2.3.33:*:*:*:*:*:*:*
struts
Version:
2.1.2_beta
CPE:
cpe:2.3:a:apache:struts:2.1.2_beta:*:*:*:*:*:*:*
struts
Version:
2.5.8
CPE:
cpe:2.3:a:apache:struts:2.5.8:*:*:*:*:*:*:*
struts
Version:
6.0.1
CPE:
cpe:2.3:a:apache:struts:6.0.1:*:*:*:*:*:*:*
struts
Version:
2.3.5
CPE:
cpe:2.3:a:apache:struts:2.3.5:*:*:*:*:*:*:*
struts
Version:
2.3.1.2
CPE:
cpe:2.3:a:apache:struts:2.3.1.2:*:*:*:*:*:*:*
struts
Version:
2.5.6
CPE:
cpe:2.3:a:apache:struts:2.5.6:*:*:*:*:*:*:*
struts
Version:
2.1.4
CPE:
cpe:2.3:a:apache:struts:2.1.4:*:*:*:*:*:*:*
struts
Version:
2.1.7
CPE:
cpe:2.3:a:apache:struts:2.1.7:*:*:*:*:*:*:*
struts
Version:
2.5.25
CPE:
cpe:2.3:a:apache:struts:2.5.25:*:*:*:*:*:*:*
struts
Version:
2.3.16
CPE:
cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*
struts
Version:
6.1.2
CPE:
cpe:2.3:a:apache:struts:6.1.2:*:*:*:*:*:*:*
struts
Version:
2.0.6
CPE:
cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*
struts
Version:
2.1.2
CPE:
cpe:2.3:a:apache:struts:2.1.2:*:*:*:*:*:*:*
struts
Version:
2.3.1.1
CPE:
cpe:2.3:a:apache:struts:2.3.1.1:*:*:*:*:*:*:*
struts
Version:
6.7.3
CPE:
cpe:2.3:a:apache:struts:6.7.3:*:*:*:*:*:*:*
struts
Version:
2.3.16.1
CPE:
cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*
struts
Version:
2.0.3
CPE:
cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*
struts
Version:
2.3.20.3
CPE:
cpe:2.3:a:apache:struts:2.3.20.3:*:*:*:*:*:*:*
struts
Version:
2.3.14.2
CPE:
cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*
struts
Version:
2.3.34
CPE:
cpe:2.3:a:apache:struts:2.3.34:*:*:*:*:*:*:*
struts
Version:
2.0.11.1
CPE:
cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*
struts
Version:
7.0.3
CPE:
cpe:2.3:a:apache:struts:7.0.3:*:*:*:*:*:*:*
struts
Version:
2.5.10.1
CPE:
cpe:2.3:a:apache:struts:2.5.10.1:*:*:*:*:*:*:*
struts
Version:
2.5.14
CPE:
cpe:2.3:a:apache:struts:2.5.14:*:*:*:*:*:*:*
struts
Version:
2.5.7
CPE:
cpe:2.3:a:apache:struts:2.5.7:*:*:*:*:*:*:*
struts
Version:
2.3.23
CPE:
cpe:2.3:a:apache:struts:2.3.23:*:*:*:*:*:*:*
struts
Version:
2.5.20
CPE:
cpe:2.3:a:apache:struts:2.5.20:*:*:*:*:*:*:*
struts
Version:
2.3.27
CPE:
cpe:2.3:a:apache:struts:2.3.27:*:*:*:*:*:*:*
struts
Version:
2.3.24.1
CPE:
cpe:2.3:a:apache:struts:2.3.24.1:*:*:*:*:*:*:*
struts
Version:
2.3.7
CPE:
cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*
This vulnerability affects 152 software configuration(s). Ensure you patch all affected systems.

Available Security Patches

1 patch available from vendors

View All Patches
Oracle

CPUAPR2026

Oracle Critical Patch Update Advisory - April 2026

Severity
Critical
Released
Apr 21, 2026
Restart Required
Security Update
View Details Vendor Page
Browse All Security Patches

References & Resources

Severity Details

7.5
out of 10.0
High

Weakness Type (CWE)

CWE-459

Incomplete Cleanup

Description
The product does not properly "clean up" and remove temporary or supporting resources after they have been used.
Typical Severity
Medium
Abstraction Level
Base
View CWE Details on MITRE

Key Information

Published Date
December 01, 2025

External Resources

NIST
NIST NVD
National Vulnerability Database
MT
MITRE CVE
Official CVE record