Apache Struts 2.0
Support for Apache Struts 2.0 has ended. There are no more security updates for this branch.
Latest version: 2.0.14, released on 16/11/2008
End of support: no date known
56 known vulnerabilities open in 2.0.14
Vulnerabilities in Apache Struts 2.0
61 vulnerabilities from the NVD affect at least one version of this branch. Last checked on 02/11/2026.
- CVE-2020-17530, CVSS 3.1: 9.8, actively exploited: still open in 2.0.14
- CVE-2013-2251, CVSS 3.1: 9.8, actively exploited: still open in 2.0.14
- CVE-2012-0391, CVSS 3.1: 9.8, actively exploited: still open in 2.0.14
- CVE-2018-11776, CVSS 3.1: 8.1, actively exploited: still open in 2.0.14
- CVE-2013-4316, CVSS 2.0: 10.0: still open in 2.0.14
- CVE-2012-0838, CVSS 2.0: 10.0: still open in 2.0.14
- CVE-2026-104711, CVSS 3.1: 9.8: still open in 2.0.14
- CVE-2023-50164, CVSS 3.1: 9.8: still open in 2.0.14
- CVE-2021-31805, CVSS 3.1: 9.8: still open in 2.0.14
- CVE-2019-0230, CVSS 3.1: 9.8: still open in 2.0.14
- CVE-2017-12611, CVSS 3.0: 9.8: still open in 2.0.14
- CVE-2016-4436, CVSS 3.0: 9.8: still open in 2.0.14
- CVE-2016-3082, CVSS 3.0: 9.8: still open in 2.0.14
- CVE-2011-3923, CVSS 3.1: 9.8: still open in 2.0.14
- CVE-2024-53677, CVSS 4.0: 9.5: still open in 2.0.14
- CVE-2013-2135, CVSS 2.0: 9.3: still open in 2.0.14
- CVE-2013-2134, CVSS 2.0: 9.3: still open in 2.0.14
- CVE-2013-1966, CVSS 2.0: 9.3: still open in 2.0.14
- CVE-2013-1965, CVSS 2.0: 9.3: still open in 2.0.14
- CVE-2026-104714, CVSS 3.1: 8.8: still open in 2.0.14
- CVE-2016-4461, CVSS 3.0: 8.8: still open in 2.0.14
- CVE-2016-3090, CVSS 3.0: 8.8: still open in 2.0.14
- CVE-2016-0785, CVSS 3.0: 8.8: still open in 2.0.14
- CVE-2025-66675, CVSS 3.1: 8.2: still open in 2.0.14
- CVE-2025-68493, CVSS 3.1: 8.1: still open in 2.0.14
- CVE-2013-2115, CVSS 3.1: 8.1: still open in 2.0.14
- CVE-2020-26258, CVSS 3.1: 7.7: still open in 2.0.14
- CVE-2026-73635, CVSS 3.1: 7.5: still open in 2.0.14
- CVE-2025-64775, CVSS 3.1: 7.5: still open in 2.0.14
- CVE-2023-41835, CVSS 3.1: 7.5: still open in 2.0.14
- CVE-2023-34396, CVSS 3.1: 7.5: still open in 2.0.14
- CVE-2019-0233, CVSS 3.1: 7.5: still open in 2.0.14
- CVE-2015-5209, CVSS 3.0: 7.5: still open in 2.0.14
- CVE-2014-0113, CVSS 2.0: 7.5: still open in 2.0.14
- CVE-2014-0112, CVSS 2.0: 7.5: still open in 2.0.14
- CVE-2020-26259, CVSS 3.1: 6.8: still open in 2.0.14
- CVE-2014-7809, CVSS 2.0: 6.8: still open in 2.0.14
- CVE-2012-4386, CVSS 2.0: 6.8: still open in 2.0.14
- CVE-2012-0394, CVSS 2.0: 6.8: still open in 2.0.14
- CVE-2012-0392, CVSS 2.0: 6.8: still open in 2.0.14
- CVE-2023-34149, CVSS 3.1: 6.5: still open in 2.0.14
- CVE-2016-4003, CVSS 3.0: 6.1: still open in 2.0.14
- CVE-2016-2162, CVSS 3.0: 6.1: still open in 2.0.14
- CVE-2015-5169, CVSS 3.0: 6.1: still open in 2.0.14
- CVE-2015-2992, CVSS 3.1: 6.1: still open in 2.0.14
- CVE-2014-0116, CVSS 2.0: 5.8: still open in 2.0.14
- CVE-2013-4310, CVSS 2.0: 5.8: still open in 2.0.14
- CVE-2013-2248, CVSS 2.0: 5.8: still open in 2.0.14
- CVE-2016-3093, CVSS 3.0: 5.3: still open in 2.0.14
- CVE-2014-0094, CVSS 2.0: 5.0: still open in 2.0.14
- CVE-2012-4387, CVSS 2.0: 5.0: still open in 2.0.14
- CVE-2011-5057, CVSS 2.0: 5.0: still open in 2.0.14
- CVE-2010-1870, CVSS 2.0: 5.0: still open in 2.0.14
- CVE-2012-1006, CVSS 2.0: 4.3: still open in 2.0.14
- CVE-2011-2087, CVSS 2.0: 4.3: still open in 2.0.14
- CVE-2011-1772, CVSS 2.0: 2.6: still open in 2.0.14
- CVE-2012-1592, CVSS 3.1: 8.8: not affected in 2.0.14
- CVE-2008-6505, CVSS 2.0: 5.0: not affected in 2.0.14
- CVE-2008-6504, CVSS 2.0: 5.0: not affected in 2.0.14
- CVE-2008-6682, CVSS 2.0: 4.3: not affected in 2.0.14
- CVE-2007-6726, CVSS 2.0: 4.3: not affected in 2.0.14
1 vulnerability of Apache Struts has no version information in the NVD and is not assigned to any branch.
Get notified
Add Apache Struts with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Apache Struts 2.0