8.1Yüksek

CVE-2025-68493Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component

Apache Software Foundation Apache Struts; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Fuse 7; Red Hat Red Hat JBoss Enterprise Application Platform 8 Yayım: 2026-01-11 16:05 (10 ay önce)

Açıklama

Missing XML Validation vulnerability in Apache Struts, Apache Struts. This issue affects Apache Struts: from 2.0.0 before 2.2.1; Apache Struts: from 2.2.1 through 6.1.0. Users are recommended to upgrade to version 6.1.1, which fixes the issue.

Zayıflık türü (CWE): CWE-611 CWE-112

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Apache Software Foundation	Apache Struts	2.0.0 – < 2.2.1
apache	struts	2.0.0 – ≤ 2.3.37
Red Hat	Red Hat Enterprise Linux 8	—
Red Hat	Red Hat Fuse 7	all versions
Red Hat	Red Hat JBoss Enterprise Application Platform 8	—
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	—

Kaynaklar ve yamalar

https://cwiki.apache.org/confluence/display/WW/S2-069 vendor-advisoryMailing ListVendor Advisory
http://www.openwall.com/lists/oss-security/2026/01/11/2 Mailing ListThird Party Advisory
https://access.redhat.com/security/cve/CVE-2025-68493
https://bugzilla.redhat.com/show_bug.cgi?id=2428559
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68493.json

CPE eşleşmeleri (NVD) (3)

cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:* ≥ 2.0.0 ≤ 2.3.37
cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:* ≥ 2.5.0 ≤ 2.5.33
cpe:2.3:a:apache:struts:*:*:*:*:*:*:*:* ≥ 6.0.0 < 6.1.1

CVSS puanı

8.1Yüksek

Kaynak: CISA-ADP · CVSS 3.1

Saldırı yolu: Ağ
Karmaşıklık: Düşük
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekir
Kapsam: Değişmez
Gizlilik: Yüksek
Bütünlük: Yok
Erişilebilirlik: Yüksek

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Tüm puanlar (5)

CISA-ADP	CVSS 3.1	8.1Yüksek
redhat-SADP	CVSS 3.1	7.1Yüksek
nvd	CVSS 3.1	8.1Yüksek
134c704f-9b21-4f2e-91b3-4a467353bcc0	CVSS 3.1	8.1Yüksek
0b0ca135-0b70-47e7-9f44-1890c2a1c46c	CVSS 3.1	7.1Yüksek

EPSS (30 günde istismar olasılığı)

50.42%

tüm CVE'lerin %99'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: none
Otomatikleştirilebilir: no
Teknik etki: partial

Zaman çizelgesi

Numara ayrıldı2025-12-19
Yayımlandı2026-01-11 16:05
IP-DB'ye ulaştı2026-10-24 23:57
Son güncelleme2026-09-14 15:04

Numarayı veren (CNA): apache
NVD durumu: Modified

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Red Hat Enterprise Linux

6.2Orta

CVE-2026-128886 2 gün önce

Dbus: server accept watch can be stalled by blocking nonce-tcp accept_with_noncefile path

Red Hat Red Hat Enterprise Linux 10

A flaw was found in dbus when configured with the nonce-tcp transport. An unauthenticated attacker able to connect to an exposed listener can cause a Denial of Service (DoS) by opening a connection and withholding the expected authentication token. Because th…

5.5Orta

CVE-2026-110330 2 gün önce

Abrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environ

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data (including environ) into a dump directory owned by the connecting unprivileged user. This al…

7.8Yüksek

CVE-2026-110331 2 gün önce

Abrt: abrt: incomplete cve-2026-54228/54229 fix — completeness gate bypassed via attacker-supplied count element

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. The completeness check introduced to mitigate CVE-2026-54228 and CVE-2026-54229 only verifies that a dump directory contains a "count" element, which an unprivileged user can create. This allows a local attacker to bypass the guard a…

6.2Orta

CVE-2026-128987 2 gün önce

Dbus: infinite cpu-spin loop in libdbus socket transport when epipe is received during write operations

Red Hat Red Hat Enterprise Linux 10

A flaw was found in dbus. A local attacker can exploit this vulnerability by connecting to an affected service, requesting a response, and stopping socket reads while keeping the connection open. Because the socket transport handles broken pipe write errors a…

5.5Orta

CVE-2026-128885 2 gün önce

Dbus: stack out-of-bounds write in dbus _dbus_poll() select() fallback when file descriptor exceeds fd_setsize

Red Hat Red Hat Enterprise Linux 10

A flaw was found in D-Bus. In configurations where the daemon falls back to using the Unix select() mechanism for event monitoring, it does not verify whether file descriptor numbers exceed allocated limits. A local attacker can exploit this flaw by opening a…

8.8Yüksek

CVE-2026-18379 3 gün önce

Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: path traversal via unsanitized repo name in addrepo/removerepo

Red Hat Red Hat Enterprise Linux 10

A flaw was found in yggdrasil-worker-package-manager. An authenticated attacker can exploit this issue to achieve arbitrary file modification or potential privilege escalation. The vulnerability exists because repository management operations fail to sanitize…