Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache cxf, oracle commerce guided search, enterprise manager base platform +2 more +4 morePotential session hijack in Apache CXFCVE-2019-12419Fix availableEPSS 13.8%9.8 Critical
- apache cxf, oracle commerce guided search, flexcube private banking +1 more +3 morePotential DOS attack due to unrestricted attachment count in messagesCVE-2019-12406Fix available6.5 Medium
- apache impalaIn Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala...CVE-2019-100847.5 High
- apache struts, redhat jboss enterprise web server +1 moreStruts ParameterInterceptor vulnerability allows remote command executionCVE-2011-3923Public exploitFix availableEPSS 89.1%9.8 Critical
- apache airflowApache Airflow vulnerable to XSS and local file disclosureCVE-2019-12417Fix available4.8 Medium
- apache thrift, oracle communications cloud native core network slice selection function, redhat jboss enterprise application platform +2 moreLoop with Unreachable Exit Condition in Apache ThriftCVE-2019-0205Public exploitFix available7.5 High
- apache thrift, oracle communications cloud native core network slice selection function, redhat jboss enterprise application platform +2 moreOut-of-bounds read in Apache ThriftCVE-2019-0210Fix available7.5 High
- apache hadoopHadoop symlink vulnerabilityCVE-2012-2945Fix available7.5 High
- apache poi, oracle application testing suite, banking enterprise originations +24 more +26 moreImproper Restriction of XML External Entity Reference in Apache POICVE-2019-12415Fix available5.5 Medium
- apache hadoop, connect2id nimbus jose\+jwt, oracle communications cloud native core security edge protection proxy +12 more +14 moreImproper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWTCVE-2019-17195Public exploitFix availableEPSS 11.1%9.8 Critical
- apache tomee, bouncycastle bc-java, netapp active iq unified manager +18 more +20 moreOut-of-Memory Error in Bouncy Castle CryptoCVE-2019-17359Fix available7.5 High
- apache hadoopuser/group information can be corrupted across storing in fsimage and reading back from fsimageCVE-2018-11768Fix available7.5 High
- redhat jboss operations network, apache struts +1 moreIt was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON)...CVE-2019-38345.6 Medium
- apache minaApache MINA SSLFilter security IssueCVE-2019-0231Fix available7.5 High
- apache libapreq2A flaw in the libapreq2 v2.07 to v2.13 multipart parser can deference a null pointer leading to a...CVE-2019-12412Fix available7.5 High
- apache jspwikiCross-site Scripting in Apache JSPWikiCVE-2019-12407Fix available6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWikiCVE-2019-10090Fix available6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWikiCVE-2019-12404Fix available6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWikiCVE-2019-10089Public exploitFix available6.1 Medium
- apache jspwikiCross-site scripting in Apache JSPWikiCVE-2019-10087Fix available6.1 Medium
- apache tapestryTiming attack on HMAC signature comparison in Apache TapestryCVE-2019-10071Fix available9.8 Critical
- apache tapestryPath traversal attack on Windows platformsCVE-2019-0207Public exploitFix available7.5 High
- apache tapestryDeserialization of Untrusted Data in Apache TapestryCVE-2019-0195Fix availableEPSS 14.0%9.8 Critical
- apache ofbizAn RCE is possible by entering Freemarker markup in an Apache OFBiz Form Widget textarea field...CVE-2019-100749.8 Critical
- apache ofbizThe "Blog", "Forum", "Contact Us" screens of the template "ecommerce" application bundled in...CVE-2019-100736.1 Medium
- apache ofbizThe java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is...CVE-2019-0189EPSS 23.7%9.8 Critical
- apache ofbizThe Apache OFBiz HTTP engine (org.apache.ofbiz.service.engine.HttpEngine.java) handles requests...CVE-2018-172009.8 Critical
- apache solrApache Solr vulnerable to XML BombCVE-2019-12401Public exploitFix available7.5 High
- apache traffic controlImproper Authentication in Apache Traffic ControlCVE-2019-12405Fix available9.8 Critical
- apache traffic serverApache Traffic Server is vulnerable to HTTP/2 setting flood attacks. Earlier versions of Apache...CVE-2019-10079Fix available7.5 High
- apache commons compress, fedoraproject fedora, oracle banking payments +16 more +18 moreDenial of Service in Apache Commons CompressCVE-2019-12402Fix availableEPSS 16.2%7.5 High
- docker desktop community edition, docker, apache geode +2 moreDocker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing...CVE-2019-15752In KEVPublic exploitEPSS 48.8%7.8 High
- apache http server, oracle communications element manager, communications session report manager +4 more +6 moreIn Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted...CVE-2019-10097Fix availableEPSS 52.9%7.2 High
- apache santuario - xml security for java, santuario xml security for java, oracle weblogic server +1 more +3 moreImproper input validation in Apache Santuario XML Security for JavaCVE-2019-12400Fix available5.5 Medium
- apache commons beanutils, nifi, debian linux +57 more +59 moreInsecure Deserialization in Apache Commons BeanutilsCVE-2019-10086Fix availableEPSS 29.1%7.3 High
- apache http server, debian linux +1 moreHTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource",...CVE-2019-10081Fix availableEPSS 14.0%7.5 High
- apache http serverIn Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended...CVE-2019-10098Public exploitFix availableEPSS 74.0%6.1 Medium
- apache http server, canonical ubuntu linux, debian linux +7 more +9 moreIn Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting...CVE-2019-10092Public exploitFix availableEPSS 81.5%6.1 Medium
- apache http server, oracle communications element manager, enterprise manager ops center +2 more +4 moreIn Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling...CVE-2019-10082Fix availableEPSS 16.5%9.1 Critical
- apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 moreSome HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of serviceCVE-2019-9518Fix availableEPSS 26.3%7.5 High
- apache http server, traffic server, apple swiftnio +20 more +22 moreSome HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of serviceCVE-2019-9517Fix availableEPSS 27.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 moreSome HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of serviceCVE-2019-9515Fix availableEPSS 87.8%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 moreSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceCVE-2019-9514Fix availableEPSS 83.3%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 High
- apache traffic server, apple swiftnio, debian linux +1 more +3 moreSome HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of serviceCVE-2019-9512Fix availableEPSS 84.0%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 High
- apache rangerCross-site scripting in Apache RangerCVE-2019-12397Fix available6.1 Medium
- apache sparkSensitive data written to disk unencrypted in SparkCVE-2019-10099Fix available7.5 High
- apache tikaAllocation of Resources Without Limits or Throttling in Apache TikaCVE-2019-10088Fix available8.8 High
- Show moreLoading…