Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache xmlbeans, debian linux, netapp oncommand unified manager core package +4 more +6 moreXMLBeans XML Entity ExpansionCVE-2021-23926Fix available9.1 Critical
- apache dolphinschedulerApache DolphinScheduler (incubating) Permission vulnerabilityCVE-2020-13922Fix available6.5 Medium
- apache dubboApache Dubbo default deserialization protocol Hessian2 cause CRECVE-2020-11995Fix available9.8 Critical
- apache flinkApache Flink directory traversal attack: reading remote files through the REST APICVE-2020-17519In KEVPublic exploitFix availableEPSS 98.0%7.5 High
- apache flinkApache Flink directory traversal attack: remote file writing through the REST APICVE-2020-17518Public exploitFix availableEPSS 49.4%7.5 High
- apache spamassassin, debian linux, fedoraproject fedora +2 moreApache SpamAssassin has an OS Command Injection vulnerabilityCVE-2020-1946Fix available9.8 Critical
- apache accumuloApache Accumulo Improper Handling of Insufficient PermissionsCVE-2020-17533Public exploitFix available8.1 High
- apache airflowIncorrect Session Validation in Apache AirflowCVE-2020-17526Fix availableEPSS 23.9%7.7 High
- apache tomeeRemote code execution in Apache TomEECVE-2020-13931Fix available9.8 Critical
- apache airflowSSRF vulnerability in Apache AirflowCVE-2020-17513Fix available5.3 Medium
- apache airflowApache Airflow logs passwords in plaintextCVE-2020-17511Fix available6.5 Medium
- apache airflowApache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944CVE-2020-17515Fix availableEPSS 16.2%6.1 Medium
- apache struts, oracle business intelligence, communications diameter intelligence hub +5 more +7 moreRemote code execution in Apache StrutsCVE-2020-17530In KEVPublic exploitFix availableEPSS 96.3%9.8 Critical
- apache nuttx, apache software foundation nuttx (incubating) +1 moreApache NuttX (incubating) Out of Bound Write from invalid fragmentation offset value specified in the IP headerCVE-2020-175299.8 Critical
- apache nuttx, apache software foundation nuttx (incubating) +1 moreApache NuttX (incubating) Out of Bound Write from invalid TCP Urgent lengthCVE-2020-175289.1 Critical
- apache tapestryDeserialization flaw in EOL Tapestry 4.CVE-2020-17531Public exploitFix available9.8 Critical
- apache groovy, atlas, netapp snapcenter +18 more +20 moreInformation Disclosure in Apache GroovyCVE-2020-17521Fix available5.5 Medium
- apache apisixIn Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction...CVE-2020-13945Public exploitFix availableEPSS 73.6%6.5 Medium
- apache traffic serverATS negative cache option is vulnerable to a cache poisoning attack. If you have this option...CVE-2020-17509Fix available7.5 High
- apache traffic serverThe ATS ESI plugin has a memory disclosure vulnerability. If you are running the plugin please...CVE-2020-17508Fix available7.5 High
- apache tomcat, debian linux, netapp element plug-in +9 more +11 moreApache Tomcat: Request header mix-up between HTTP/2 streamsCVE-2020-17527Public exploitFix availableEPSS 24.6%7.5 High
- apache unomiRemote Code Execution in Apache UnomiCVE-2020-13942Public exploitFix availableEPSS 68.5%9.8 Critical
- apache openofficeA vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents...CVE-2020-13958Public exploit7.8 High
- apache cxf, netapp snap creator framework, vasa provider for clustered data ontap +3 more +5 moreApache CXF Reflected XSS in the services listing page via the styleSheetPathCVE-2020-13954Fix availableEPSS 40.9%6.1 Medium
- apache airflow, airflow's experimental api +1 moreAuthentication bypass in Apache AirflowCVE-2020-13927In KEVPublic exploitFix availableEPSS 99.8%9.8 Critical
- apache shiro, debian linux +1 moreAuthentication bypass in Apache ShiroCVE-2020-17510Fix available9.8 Critical
- apache tomcat, oracle agile product lifecycle management +1 moreResponse mix-up with WebSocket concurrent send and closeCVE-2022-25762Fix available8.6 High
- apache hadoopAuthentication bypass in Apache HadoopCVE-2018-11764Fix available8.8 High
- apache kylinAuthentication bypass in Apache KylinCVE-2020-13937Public exploitFix availableEPSS 78.3%5.3 Medium
- apache solrIncorrect Authorization in Apache SolrCVE-2020-13957Public exploitFix availableEPSS 79.3%9.8 Critical
- apache fineractThe implementation of POST with the username and password in the URL parameters exposed the...CVE-2018-202437.5 High
- apache tomcat, debian linux, oracle instantis enterprisetrack +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2020-13943Fix availableEPSS 52.6%4.3 Medium
- apache httpclient, netapp active iq unified manager, snapcenter +14 more +16 moreCross-site scripting in Apache HttpClientCVE-2020-13956Fix available5.3 Medium
- apache calciteMissing Authentication for Critical Function in Apache CalciteCVE-2020-13955Fix available5.9 Medium
- apache nifiInadequate Encryption Strength in Apache NiFiCVE-2020-9491Fix available7.5 High
- apache nifiImproper Restriction of XML External Entity Reference in Apache NiFiCVE-2020-13940Fix available5.5 Medium
- apache nifiMissing Authentication for Critical Function in Apache NiFiCVE-2020-9487Fix available7.5 High
- apache nifiInsertion of Sensitive Information into Log File in Apache NiFi StatelessCVE-2020-9486Fix available7.5 High
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache AntCVE-2020-11979Fix available7.5 High
- apache supersetPlaintext password leak in Apache SupersetCVE-2020-13952Fix available8.1 High
- apache openmeetingsDenial of service in Apache OpenMeetingsCVE-2020-13951Public exploitFix availableEPSS 68.6%7.5 High
- apache hadoopImproper Authentication in Apache HadoopCVE-2018-11765Fix available7.5 High
- apache tapestryImproper file downloads in Apache TapestryCVE-2020-13953Fix available5.3 Medium
- apache airflowApache Airflow Cross-site ScriptingCVE-2020-13944Fix availableEPSS 25.1%6.1 Medium
- apache supersetApache Superset OS Command InjectionCVE-2020-13948Fix available8.8 High
- apache atlasCross-site scripting in Apache AtlasCVE-2020-13928Fix available6.1 Medium
- apache syncopeShell command injection in Apache SyncopeCVE-2020-11977Fix available7.2 High
- apache struts, oracle communications policy management, financial services data integration hub +2 more +4 moreImproper Preservation of Permissions in Apache StrutsCVE-2019-0233Fix availableEPSS 66.1%7.5 High
- apache struts, oracle communications policy management, financial services data integration hub +2 more +4 moreImproperly Controlled Modification of Dynamically-Determined Object Attributes in Apache StrutsCVE-2019-0230Public exploitFix availableEPSS 96.9%9.8 Critical
- apache cocoonWhen using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML,...CVE-2020-11991EPSS 72.6%7.5 High
- Show moreLoading…