Class based , object oriented programming language. Designed to have less dependencies as possible. The syntex of Java is smilier to C and C++. Commonly used for client-server applications. Java files are compiled by JVM (Java Virtual Machine)

Java

Apache Struts is an open-source web application framework for developing Java-based web applications. It uses the Model-View-Controller (MVC) design pattern to separate the application logic, user interface, and data management, promoting a modular and maintainable development approach. Struts provide a set of tools and libraries, such as form handling, validation, and internationalization, that simplify the development process and improve productivity.

Apache Struts

Denial of Service vulnerability in Apache Struts, file leak in multipart request processing causes disk exhaustion.

This issue affects Apache Struts: from 2.0.0 through 6.7.4, from 7.0.0 through 7.0.3.

Users are recommended to upgrade to version 6.8.0 or 7.1.1, which fixes the issue.

It's related to  https://cve.org/CVERecord?id=CVE-2025-64775  - this CVE addresses missing affected version 6.7.4

CVE-2025-66675

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2025-29847	HIGH	7.5	Java	org.apache.linkis:linkis	No	Yes	Jan 19, 2026
CVE-2026-1050	MEDIUM	6.9	Java	net.risesoft:risenet-y9boot-support-platform-service	No	No	Jan 17, 2026
CVE-2025-15104	MEDIUM	6.9	JavaScript	vnu-jar	No	No	Jan 16, 2026
CVE-2025-59355	MEDIUM	6.5	Java	org.apache.linkis:linkis-metadata	No	Yes	Jan 19, 2026
CVE-2026-0858	MEDIUM	5.1	Java	net.sourceforge.plantuml:plantuml	No	Yes	Jan 16, 2026

CVE-2025-66675:
Java vulnerability analysis and mitigation

8.2

Related Java vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2025-66675: Java vulnerability analysis and mitigation