Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache tomcatInconsistent documentation in Apache TomcatCVE-2017-15706Fix available5.3 Medium
- apache poiDenial of Service in Apache POICVE-2017-12626Fix availableEPSS 10.1%7.5 High
- apache nifiDenial of service via deserialization attack in nifiCVE-2017-15703Fix available5.0 Medium
- apache hadoopExposure of Sensitive Information in HadoopCVE-2017-15718Fix available9.8 Critical
- apache nifiApache NiFi XSS issue in context path handlingCVE-2017-15697Fix available9.8 Critical
- apache nifiApache NiFi host header poisoning issueCVE-2017-12632Fix available7.5 High
- apache hadoopModerate severity vulnerability that affects org.apache.hadoop:hadoop-mainCVE-2017-15713Fix available6.5 Medium
- apache guacamoleApache Guacamole Race Condition vulnerabilityCVE-2017-3158Fix available8.1 High
- apache activemqImproper Neutralization of Input During Web Page Generation Apache ActiveMQCVE-2016-6810Fix available6.1 Medium
- apache sling xss protection api, sling xss protection api compat, apache software foundation sling +2 moreCross-site Scripting in Apache Sling XSS Protection APICVE-2017-15717Fix available6.1 Medium
- apache geodeApache Geode OQL bind parameter vulnerabilityCVE-2017-9796Fix available5.3 Medium
- apache geodeApache Geode OQL method invocation vulnerabilityCVE-2017-9795Fix available7.5 High
- apache geodeApache Geode gfsh authorization vulnerabilityCVE-2017-12622Fix available7.1 High
- apache sling jcr contentloader, apache software foundation sling +1 moreApache Sling JCR ContentLoader XmlReader Arbitrary File LoadCVE-2012-3353Fix available7.5 High
- apache deltaspikeCross-site Scripting in Apache DeltaSpikeCVE-2017-17837Fix available6.1 Medium
- apache ofbizThe BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed....CVE-2017-157149.8 Critical
- apache flex blazeds, apache software foundation flex blaze ds, hp xp command view advanced edition +2 moreApache Flex BlazeDS unsafe deserializationCVE-2017-5641Fix availableEPSS 20.7%9.8 Critical
- apache sling authentication service, apache software foundation sling +1 moreApache Sling Authentication Service vulnerabilityCVE-2017-15700Fix available8.8 High
- apache drillApache Drill vulnerable to Cross-site ScriptingCVE-2017-12630Fix available5.4 Medium
- apache fineractIn Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated...CVE-2017-56638.8 High
- apache synapse, oracle financial services market risk measurement and management, peoplesoft enterprise peopletools +2 moreRemote Code Execution in Apache SynapseCVE-2017-15708Public exploitFix availableEPSS 17.9%9.8 Critical
- apache struts, netapp oncommand balance, oracle agile plm framework +9 more +11 moreModerate severity vulnerability that affects org.apache.struts:struts2-rest-pluginCVE-2017-15707Fix available6.2 Medium
- apache qpid broker-jApache Qpid Broker vulnerable to authentication port spoofingCVE-2017-15702Fix available9.8 Critical
- apache qpid broker-jApache Qpid Broker-J vulnerable to Denial of Service (DoS) via uncontrolled resource consumptionCVE-2017-15701Fix available7.5 High
- apache cxf fedizModerate severity vulnerability that affects org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3CVE-2017-12631Fix available8.8 High
- apache openofficeA vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the...CVE-2017-9806Fix available7.8 High
- apache openofficeThe Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice...CVE-2016-68047.8 High
- apache camelCamel-castor component in Apache Camel is vulnerable to Java object de-serialisationCVE-2017-12634Fix available9.8 Critical
- apache camelApache Camel camel-hessian component vulnerable to Java object deserializationCVE-2017-12633Fix available9.8 Critical
- apache couchdbCouchDB administrative users can configure the database server via HTTP(S). Some of the...CVE-2017-12636Public exploitEPSS 90.6%7.2 High
- apache couchdbDue to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is...CVE-2017-12635Public exploitEPSS 99.8%9.8 Critical
- apache cxfImproper Input Validation in Apache CXFCVE-2017-12624Public exploitFix available5.5 Medium
- apache hadoopModerate severity vulnerability that affects org.apache.hadoop:hadoop-mainCVE-2017-3166Fix available7.8 High
- apache openofficeAn installer defect known as an "unquoted Windows search path vulnerability" affected the Apache...CVE-2016-68037.8 High
- apache hiveModerate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-serviceCVE-2017-12625Fix available4.3 Medium
- apache openoffice, debian linux +1 moreA vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in...CVE-2017-12608Fix available7.8 High
- apache openoffice, debian linux +1 moreA vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet,...CVE-2017-12607Fix available7.8 High
- apache portable runtime utility, apache software foundation portable runtime +1 moreApache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM...CVE-2017-12618Fix available4.7 Medium
- apache portable runtime, debian linux, redhat enterprise linux desktop +8 more +10 moreWhen apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field...CVE-2017-12613Fix available7.1 High
- apache derbyImproper Access Control in Apache DerbyCVE-2010-2232Fix available7.5 High
- apache software foundation james, apache james server +1 moreApache James Privilege EscalationCVE-2017-12628Fix available7.8 High
- apache nifiInjection in Apache NiFiCVE-2017-5636Fix available9.8 Critical
- apache nifiImproper Authentication In Apache NiFiCVE-2017-5635Fix available7.5 High
- apache nifiCross-site Scripting in Apache NiFiCVE-2016-8748Fix available5.4 Medium
- apache rangerModerate severity vulnerability that affects org.apache.ranger:rangerCVE-2016-6815Fix available6.5 Medium
- apache openmeetingsApache OpenMeetings RCECVE-2016-8736Fix available9.8 Critical
- apache nifiXML External Entity Reference in Apache NiFiCVE-2017-12623Fix available6.5 Medium
- apache impalaIn Apache Impala (incubating) before 2.10.0, a malicious user with "ALTER" permissions on an...CVE-2017-97926.5 Medium
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- apache opennlpImproper Restriction of XML External Entity Reference in Apache OpenNLPCVE-2017-12620Fix available9.8 Critical
- Show moreLoading…