CVE-2015-5169

Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20.

• CWE-79

• http://jvn.jp/en/jp/JVN95989300/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000125.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/76625Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1260087Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20180629-0003/Third Party Advisory
• https://struts.apache.org/docs/s2-025.htmlVendor Advisory
• http://jvn.jp/en/jp/JVN95989300/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/en/contents/2015/JVNDB-2015-000125.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/76625Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1260087Issue Tracking, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20180629-0003/Third Party Advisory
• https://struts.apache.org/docs/s2-025.htmlVendor Advisory

Published

Sep 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5163The import task action in OpenStack Image Service (Glance) 2…
• CVE-2015-5164The Qpid server on Red Hat Satellite 6 does not properly res…
• CVE-2015-5165The C+ mode offload emulation in the RTL8139 network card de…
• CVE-2015-5166Use-after-free vulnerability in QEMU in Xen 4.5.x and earlie…
• CVE-2015-5167The Policy Admin Tool in Apache Ranger before 0.5.1 allows r…
• CVE-2015-5168Unspecified vulnerability in the HTTP/2 experimental feature…
• CVE-2015-5170Cloud Foundry Runtime cf-release before 216, UAA before 2.5.…8.8
• CVE-2015-5171The password change functionality in Cloud Foundry Runtime c…9.8
• CVE-2015-5172Cloud Foundry Runtime cf-release before 216, UAA before 2.5.…9.8
• CVE-2015-5173Cloud Foundry Runtime cf-release before 216, UAA before 2.5.…8.8
• CVE-2015-5174Directory traversal vulnerability in RequestUtil.java in Apa…
• CVE-2015-5175Application plugins in Apache CXF Fediz before 1.1.3 and 1.2…