Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache tomcat native, debian linux +1 moreWhen parsing the AIA-Extension field of a client certificate, Apache Tomcat Native Connector 1.2...CVE-2017-15698Fix available5.9 Medium
- apache tomcatInconsistent documentation in Apache TomcatCVE-2017-15706Fix available5.3 Medium
- apache poiDenial of Service in Apache POICVE-2017-12626Fix availableEPSS 10.1%7.5 High
- apache nifiDenial of service via deserialization attack in nifiCVE-2017-15703Fix available5.0 Medium
- apache hadoopExposure of Sensitive Information in HadoopCVE-2017-15718Fix available9.8 Critical
- apache nifiApache NiFi XSS issue in context path handlingCVE-2017-15697Fix available9.8 Critical
- apache nifiApache NiFi host header poisoning issueCVE-2017-12632Fix available7.5 High
- apache hadoopModerate severity vulnerability that affects org.apache.hadoop:hadoop-mainCVE-2017-15713Fix available6.5 Medium
- apache guacamoleApache Guacamole Race Condition vulnerabilityCVE-2017-3158Fix available8.1 High
- apache activemqImproper Neutralization of Input During Web Page Generation Apache ActiveMQCVE-2016-6810Fix available6.1 Medium
- apache sling xss protection api, sling xss protection api compat, apache software foundation sling +2 moreCross-site Scripting in Apache Sling XSS Protection APICVE-2017-15717Fix available6.1 Medium
- apache geodeApache Geode OQL bind parameter vulnerabilityCVE-2017-9796Fix available5.3 Medium
- apache geodeApache Geode OQL method invocation vulnerabilityCVE-2017-9795Fix available7.5 High
- apache geodeApache Geode gfsh authorization vulnerabilityCVE-2017-12622Fix available7.1 High
- apache sling jcr contentloader, apache software foundation sling +1 moreApache Sling JCR ContentLoader XmlReader Arbitrary File LoadCVE-2012-3353Fix available7.5 High
- apache deltaspikeCross-site Scripting in Apache DeltaSpikeCVE-2017-17837Fix available6.1 Medium
- apache ofbizThe BIRT plugin in Apache OFBiz 16.11.01 to 16.11.03 does not escape user input property passed....CVE-2017-157149.8 Critical
- apache flex blazeds, apache software foundation flex blaze ds, hp xp command view advanced edition +2 moreApache Flex BlazeDS unsafe deserializationCVE-2017-5641Fix availableEPSS 20.7%9.8 Critical
- apache sling authentication service, apache software foundation sling +1 moreApache Sling Authentication Service vulnerabilityCVE-2017-15700Fix available8.8 High
- apache drillApache Drill vulnerable to Cross-site ScriptingCVE-2017-12630Fix available5.4 Medium
- apache fineractIn Apache Fineract 0.4.0-incubating, 0.5.0-incubating, and 0.6.0-incubating, an authenticated...CVE-2017-56638.8 High
- apache synapse, oracle financial services market risk measurement and management, peoplesoft enterprise peopletools +2 moreRemote Code Execution in Apache SynapseCVE-2017-15708Public exploitFix availableEPSS 17.9%9.8 Critical
- apache struts, netapp oncommand balance, oracle agile plm framework +9 more +11 moreModerate severity vulnerability that affects org.apache.struts:struts2-rest-pluginCVE-2017-15707Fix available6.2 Medium
- apache qpid broker-jApache Qpid Broker vulnerable to authentication port spoofingCVE-2017-15702Fix available9.8 Critical
- apache qpid broker-jApache Qpid Broker-J vulnerable to Denial of Service (DoS) via uncontrolled resource consumptionCVE-2017-15701Fix available7.5 High
- apache cxf fedizModerate severity vulnerability that affects org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3CVE-2017-12631Fix available8.8 High
- apache openofficeA vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the...CVE-2017-9806Fix available7.8 High
- apache openofficeThe Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice...CVE-2016-68047.8 High
- simplexml project simplexml, apache solr +1 moreSimpleXML has XML External Entity (XXE) vulnerabilityCVE-2017-1000190Fix available9.1 Critical
- apache karafImproper Input Validation in Apache KarafCVE-2014-0219Fix available5.5 Medium
- apache camelCamel-castor component in Apache Camel is vulnerable to Java object de-serialisationCVE-2017-12634Fix available9.8 Critical
- apache camelApache Camel camel-hessian component vulnerable to Java object deserializationCVE-2017-12633Fix available9.8 Critical
- apache couchdbCouchDB administrative users can configure the database server via HTTP(S). Some of the...CVE-2017-12636Public exploitEPSS 90.6%7.2 High
- apache couchdbDue to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is...CVE-2017-12635Public exploitEPSS 99.8%9.8 Critical
- apache cxfImproper Input Validation in Apache CXFCVE-2017-12624Public exploitFix available5.5 Medium
- apache hadoopModerate severity vulnerability that affects org.apache.hadoop:hadoop-mainCVE-2017-3166Fix available7.8 High
- apache openofficeAn installer defect known as an "unquoted Windows search path vulnerability" affected the Apache...CVE-2016-68037.8 High
- apache hiveModerate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-serviceCVE-2017-12625Fix available4.3 Medium
- apache openoffice, debian linux +1 moreA vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in...CVE-2017-12608Fix available7.8 High
- apache openoffice, debian linux +1 moreA vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet,...CVE-2017-12607Fix available7.8 High
- apache cordova, cordova in-app-browser +1 moreThe CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache...CVE-2014-00739.8 Critical
- apache cordova, cordova file transfer +1 moreios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova...CVE-2014-00727.5 High
- apache httpclientHostname verification in Apache HttpClient 4.3 was disabled by defaultCVE-2013-4366Fix available9.8 Critical
- apache wicketCross-site scripting (XSS) vulnerability in Apache Wicket 1.4.x before 1.4.22, 1.5.x before 1.5...CVE-2012-56366.1 Medium
- apache hadoopUse of a Broken or Risky Cryptographic Algorithm in Apache HadoopCVE-2012-4449Fix available9.8 Critical
- apache stormApache Storm log viewer path traversal vulnerabilityCVE-2014-01157.5 High
- apache xerces2 javaDenial of service in Apache Xerces2CVE-2012-0881Fix availableEPSS 17.5%7.5 High
- apache juddiCross-site scripting (XSS) vulnerability in Apache jUDDI before 2.0 allows remote attackers to...CVE-2009-11986.1 Medium
- apache juddiApache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to...CVE-2009-11975.3 Medium
- apache strutsApache Struts RCE VulnerabilityCVE-2016-3090Fix available8.8 High
- Show moreLoading…