Apache Struts is a free, open-source MVC framework for developing web applications in the Java programming language. The framework is used by 65 percent of the Fortune 100 companies, including Lockheed Martin, Vodafone, Virgin Atlantic, and the IRS. One of the flaws is believed to be used to breach personal data of over 143 million Equifax users. Cisco is also testing rest of its products against four newly discovered security vulnerability in Apache Strut2, including the one (Cisco) we reported on September 5 and the remaining three also disclosed last week.
Source: https://thehackernews.com/2017/09/apache-struts-flaws-cisco.html