diff --git a/assembly/pom.xml b/assembly/pom.xml
index 56a801de1..ab349ad7f 100644
--- a/assembly/pom.xml
+++ b/assembly/pom.xml
@@ -206,11 +206,6 @@
             <artifactId>struts2-tiles-plugin</artifactId>
         </dependency>
 
-        <dependency>
-            <groupId>org.apache.struts</groupId>
-            <artifactId>struts2-oval-plugin</artifactId>
-        </dependency>
-
         <dependency>
             <groupId>org.apache.struts</groupId>
             <artifactId>struts2-json-plugin</artifactId>
diff --git a/assembly/src/main/assembly/all.xml b/assembly/src/main/assembly/all.xml
index 8dcb1856c..7be72203c 100644
--- a/assembly/src/main/assembly/all.xml
+++ b/assembly/src/main/assembly/all.xml
@@ -78,14 +78,6 @@
         <include>SITEMESH-LICENSE.txt</include>
       </includes>
     </fileSet>
-    <fileSet>
-      <directory>../plugins/oval/src/main/resources</directory>
-      <outputDirectory></outputDirectory>
-      <includes>
-        <include>OVAL-LICENSE.txt</include>
-        <include>XSTREAM-LICENSE.txt</include>
-      </includes>
-    </fileSet>
     <fileSet>
       <directory>target/apps</directory>
       <outputDirectory>apps</outputDirectory>
@@ -161,10 +153,6 @@
         <directory>../plugins/osgi/target/apidocs</directory>
         <outputDirectory>docs/struts2-plugins/struts2-osgi-plugin/apidocs</outputDirectory>
       </fileSet>
-      <fileSet>
-        <directory>../plugins/oval/target/apidocs</directory>
-        <outputDirectory>docs/struts2-plugins/struts2-oval-plugin/apidocs</outputDirectory>
-      </fileSet>
       <fileSet>
         <directory>../plugins/plexus/target/apidocs</directory>
         <outputDirectory>docs/struts2-plugins/struts2-plexus-plugin/apidocs</outputDirectory>
diff --git a/assembly/src/main/assembly/docs.xml b/assembly/src/main/assembly/docs.xml
index 641419eb9..344c91f7b 100644
--- a/assembly/src/main/assembly/docs.xml
+++ b/assembly/src/main/assembly/docs.xml
@@ -96,10 +96,6 @@
             <directory>../plugins/osgi/target/apidocs</directory>
             <outputDirectory>docs/struts2-plugins/struts2-osgi-plugin/apidocs</outputDirectory>
         </fileSet>
-        <fileSet>
-            <directory>../plugins/oval/target/apidocs</directory>
-            <outputDirectory>docs/struts2-plugins/struts2-oval-plugin/apidocs</outputDirectory>
-        </fileSet>
         <fileSet>
             <directory>../plugins/plexus/target/apidocs</directory>
             <outputDirectory>docs/struts2-plugins/struts2-plexus-plugin/apidocs</outputDirectory>
diff --git a/assembly/src/main/assembly/lib.xml b/assembly/src/main/assembly/lib.xml
index f40bfb26c..b03f2d3cc 100644
--- a/assembly/src/main/assembly/lib.xml
+++ b/assembly/src/main/assembly/lib.xml
@@ -78,13 +78,5 @@
         <include>SITEMESH-LICENSE.txt</include>
       </includes>
     </fileSet>
-    <fileSet>
-      <directory>../plugins/oval/src/main/resources</directory>
-      <outputDirectory></outputDirectory>
-      <includes>
-        <include>OVAL-LICENSE.txt</include>
-        <include>XSTREAM-LICENSE.txt</include>
-      </includes>
-    </fileSet>
   </fileSets>
 </assembly>
diff --git a/bom/pom.xml b/bom/pom.xml
index 0e184e248..1e20d6f61 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -116,11 +116,6 @@
                 <artifactId>struts2-osgi-plugin</artifactId>
                 <version>${struts-version.version}</version>
             </dependency>
-            <dependency>
-                <groupId>org.apache.struts</groupId>
-                <artifactId>struts2-oval-plugin</artifactId>
-                <version>${struts-version.version}</version>
-            </dependency>
             <dependency>
                 <groupId>org.apache.struts</groupId>
                 <artifactId>struts2-plexus-plugin</artifactId>
diff --git a/pom.xml b/pom.xml
index 4f2f7b85d..0a4a2500c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -604,11 +604,6 @@
                 <artifactId>struts2-testng-plugin</artifactId>
                 <version>${project.version}</version>
             </dependency>
-            <dependency>
-                <groupId>org.apache.struts</groupId>
-                <artifactId>struts2-oval-plugin</artifactId>
-                <version>${project.version}</version>
-            </dependency>
             <dependency>
                 <groupId>org.apache.struts</groupId>
                 <artifactId>struts2-json-plugin</artifactId>
diff --git a/src/etc/project-suppression.xml b/src/etc/project-suppression.xml
index be1c572b1..38324163d 100644
--- a/src/etc/project-suppression.xml
+++ b/src/etc/project-suppression.xml
@@ -148,36 +148,6 @@
         <packageUrl regex="true">^pkg:maven/org\.codehaus\.plexus/plexus\-utils@.*$</packageUrl>
         <vulnerabilityName>Possible XML Injection</vulnerabilityName>
     </suppress>
-    <suppress>
-        <notes><![CDATA[file name: oval-1.90.jar]]></notes>
-        <packageUrl regex="true">^pkg:maven/net\.sf\.oval/oval@.*$</packageUrl>
-        <cpe>cpe:/a:apache:groovy</cpe>
-    </suppress>
-    <suppress>
-        <notes><![CDATA[file name: oval-1.90.jar]]></notes>
-        <packageUrl regex="true">^pkg:maven/net\.sf\.oval/oval@.*$</packageUrl>
-        <cpe>cpe:/a:apache:log4j</cpe>
-    </suppress>
-    <suppress>
-        <notes><![CDATA[file name: oval-1.90.jar]]></notes>
-        <packageUrl regex="true">^pkg:maven/net\.sf\.oval/oval@.*$</packageUrl>
-        <cpe>cpe:/a:jruby:jruby</cpe>
-    </suppress>
-    <suppress>
-        <notes><![CDATA[file name: oval-1.90.jar]]></notes>
-        <packageUrl regex="true">^pkg:maven/net\.sf\.oval/oval@.*$</packageUrl>
-        <cpe>cpe:/a:xstream_project:xstream</cpe>
-    </suppress>
-    <suppress>
-        <notes><![CDATA[file name: oval-1.90.jar: xstream-1.4.19.jar]]></notes>
-        <packageUrl regex="true">^pkg:maven/com\.thoughtworks\.xstream/xstream@.*$</packageUrl>
-        <cve>CVE-2022-40151</cve>
-        <cve>CVE-2022-40152</cve>
-        <cve>CVE-2022-40153</cve>
-        <cve>CVE-2022-40154</cve>
-        <cve>CVE-2022-40155</cve>
-        <cve>CVE-2022-40156</cve>
-    </suppress>
     <!-- TestNG -->
     <suppress>
         <notes><![CDATA[file name: guava-19.0.jar]]></notes>