Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache nifiApache NiFi user log out issueCVE-2019-12421Fix available8.8 High
- apache nifiApache NiFi information disclosure by XXECVE-2019-10080Fix available6.5 Medium
- apache arrowMissing Initialization of Resource in Apache ArrowCVE-2019-12408Fix available7.5 High
- apache arrowMissing Initialization of Resource in Apache ArrowCVE-2019-12410Fix available7.5 High
- apache cxf, oracle commerce guided search, enterprise manager base platform +2 more +4 morePotential session hijack in Apache CXFCVE-2019-12419Fix availableEPSS 13.8%9.8 Critical
- apache cxf, oracle commerce guided search, flexcube private banking +1 more +3 morePotential DOS attack due to unrestricted attachment count in messagesCVE-2019-12406Fix available6.5 Medium
- apache impalaIn Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala...CVE-2019-100847.5 High
- apache airflowApache Airflow vulnerable to XSS and local file disclosureCVE-2019-12417Fix available4.8 Medium
- apache thrift, oracle communications cloud native core network slice selection function, redhat jboss enterprise application platform +2 moreLoop with Unreachable Exit Condition in Apache ThriftCVE-2019-0205Public exploitFix available7.5 High
- apache thrift, oracle communications cloud native core network slice selection function, redhat jboss enterprise application platform +2 moreOut-of-bounds read in Apache ThriftCVE-2019-0210Fix available7.5 High
- apache poi, oracle application testing suite, banking enterprise originations +24 more +26 moreImproper Restriction of XML External Entity Reference in Apache POICVE-2019-12415Fix available5.5 Medium
- apache hadoopuser/group information can be corrupted across storing in fsimage and reading back from fsimageCVE-2018-11768Fix available7.5 High
- apache minaApache MINA SSLFilter security IssueCVE-2019-0231Fix available7.5 High
- apache libapreq2A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a...CVE-2019-12412Fix available7.5 High
- apache jspwikiCross-site Scripting in Apache JSPWikiCVE-2019-12407Fix available6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWikiCVE-2019-10090Fix available6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWikiCVE-2019-12404Fix available6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWikiCVE-2019-10089Public exploitFix available6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWikiCVE-2019-10087Fix available6.1 Medium
- apache tapestryTiming attack on HMAC signature comparison in Apache TapestryCVE-2019-10071Fix available9.8 Critical
- apache tapestryPath traversal attack on Windows platformsCVE-2019-0207Public exploitFix available7.5 High
- apache tapestryDeserialization of Untrusted Data in Apache TapestryCVE-2019-0195Fix availableEPSS 14.0%9.8 Critical
- apache traffic serverApache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache...CVE-2019-10079Fix available7.5 High
- apache commons compress, fedoraproject fedora, oracle banking payments +16 more +18 moreDenial of Service in Apache Commons CompressCVE-2019-12402Fix availableEPSS 16.2%7.5 High
- apache http server, oracle communications element manager, communications session report manager +4 more +6 moreIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...CVE-2019-10097Fix availableEPSS 52.9%7.2 High
- apache http server, debian linux +1 moreHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...CVE-2019-10081Fix availableEPSS 14.0%7.5 High
- apache http serverIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...CVE-2019-10098Public exploitFix availableEPSS 74.0%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +7 more +9 moreIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...CVE-2019-10092Public exploitFix availableEPSS 81.5%6.1 Medium
- apache http server, oracle communications element manager, enterprise manager ops center +2 more +4 moreIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...CVE-2019-10082Fix availableEPSS 16.5%9.1 Critical
- apache rangerCross-site scripting in Apache RangerCVE-2019-12397Fix available6.1 Medium
- apache sparkSensitive data written to disk unencrypted in SparkCVE-2019-10099Fix available7.5 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache TikaCVE-2019-10088Fix available8.8 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache TikaCVE-2019-10094Fix available7.8 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache TikaCVE-2019-10093Fix available6.5 Medium
- apache solr, debian linux +1 moreXML External Entity (XXE) Injection in Apache SolrCVE-2019-0193In KEVPublic exploitFix availableEPSS 83.5%7.2 High
- apache subversionIn Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve...CVE-2019-0203Fix available7.5 High
- apache subversionIn Apache Subversion versions up to and including 1.9.10, 1.10.4, 1.12.0, Subversion's svnserve...CVE-2018-11782Fix available6.5 Medium
- apache rollerA Reflected Cross-site Scripting (XSS) vulnerability exists in Apache Roller. Roller's Math...CVE-2019-02346.1 Medium
- apache geodeArgument Injection in Apache Geode serverCVE-2017-15694Fix available6.5 Medium
- apache tomcatImproper Locking in Apache TomcatCVE-2019-10072Fix availableEPSS 73.0%7.5 High
- apache alluraIn Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown...CVE-2019-100856.1 Medium
- apache fineractSQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary...CVE-2018-118019.8 Critical
- apache fineractSQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary...CVE-2018-118009.8 Critical
- apache hadoopPrivilege escalation vulnerability in Apache HadoopCVE-2018-8029Fix available8.8 High
- apache camel, oracle enterprise data quality, enterprise manager base platform +2 more +4 moreXML External Entity injection in Apache CamelCVE-2019-0188Fix available7.5 High
- apache rollerServer-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller 5.2.1, 5.2...CVE-2018-171989.8 Critical
- apache tomcatCross-site scripting in Apache TomcatCVE-2019-0221Public exploitFix availableEPSS 58.3%6.1 Medium
- apache zookeeper, activemq, drill +7 more +9 moreAccess control bypass in Apache ZooKeeperCVE-2019-0201Fix available5.9 Medium
- apache jspwikiCross-site Scriptin in JSPWikiCVE-2019-10078Public exploitFix available6.1 Medium
- apache jspwikiCross-site Scripting in JSPWikiCVE-2019-10077Public exploitFix available6.1 Medium
- Show moreLoading…