Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache activemq, oracle communications diameter signaling router, communications element manager +4 more +6 moreApache ActiveMQ webconsole admin GUI is open to XSSCVE-2020-1941Fix available6.1 Medium
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreDeserialization of Untrusted Data in Apache Camel RabbitMQCVE-2020-11972Fix available9.8 Critical
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreApache Camel Netty enables Java deserialization by defaultCVE-2020-11973Fix available9.8 Critical
- apache camel, oracle communications diameter intelligence hub, communications diameter signaling router +2 more +4 moreImproper Input Validation in Apache CamelCVE-2020-11971Fix availableEPSS 14.0%7.5 High
- apache cloudstackA buffer overflow vulnerability has been found in the baremetal component of Apache CloudStack....CVE-2019-175629.8 Critical
- apache rocketmqDirectory traversal in Apache RocketMQCVE-2019-17572Public exploitFix available5.3 Medium
- apache flinkCommand injection in Apache FlinkCVE-2020-1960Fix available4.7 Medium
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- apache nuttx, apache software foundation nuttx (incubating) +1 moreThe Apache NuttX (Incubating) project provides an optional separate "apps" repository which...CVE-2020-19399.8 Critical
- apache log4net, fedoraproject fedora, netapp manageability software development kit +4 more +6 moreXML External Entity attack in log4netCVE-2018-1285Public exploitFix availableEPSS 17.8%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- apache syncopeInjection in Apache SyncopeCVE-2020-1961Fix available9.8 Critical
- apache syncopeCross-site scripting in Apache Syncome EndUserCVE-2019-17557Fix available5.4 Medium
- apache syncopeExpression Language Injection in Apache SyncopeCVE-2020-1959Fix available9.8 Critical
- apache ofbizApache OFBiz 17.12.01 is vulnerable to some CSRF attacks.CVE-2019-0235Public exploitEPSS 32.7%8.8 High
- apache ofbizApache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary hostCVE-2019-124257.5 High
- apache nifi registryInsufficient Session Expiration in Apache NiFi RegistryCVE-2020-9482Fix available6.5 Medium
- apache ats, traffic server, debian linux +2 moreApache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read...CVE-2020-9481Fix available7.5 High
- apache iotdbImproper Certificate Validation in Apache IoTDBCVE-2020-1952Fix available9.8 Critical
- apache log4j, debian linux, oracle communications application session controller +43 more +45 moreImproper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488Public exploitFix available3.7 Low
- apache tika, the apache software foundation apache tika, oracle communications messaging server +3 more +5 moreMissing Release of Memory after Effective Lifetime in Apache TikaCVE-2020-9489Fix available5.5 Medium
- apache heronDeserialization of Untrusted Data in Apache HeronCVE-2020-1964Fix available9.8 Critical
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...CVE-2020-1927Fix availableEPSS 56.7%6.1 Medium
- apache druidCredentials bypass in Apache DruidCVE-2020-1958Public exploitFix available6.5 Medium
- apache dubboDeserialization of Untrusted Data in Apache DubboCVE-2019-17564Public exploitFix availableEPSS 36.5%9.8 Critical
- apache solrIncorrect Authorization in Apache SolrCVE-2018-11802Fix available4.3 Medium
- apache cxf, netapp oncommand workflow automation, snapmanager +7 more +9 moreApache CXF JMX Integration is vulnerable to a MITM attackCVE-2020-1954Fix available5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...CVE-2020-1934Fix availableEPSS 52.0%5.3 Medium
- apache sling cms, apache software foundation sling +1 moreScripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when...CVE-2020-19496.1 Medium
- apache ofbizData sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache...CVE-2020-1943EPSS 97.2%6.1 Medium
- apache netbeans, oracle graalvm +1 moreImproper Verification of Cryptographic Signature in Apache NetbeansCVE-2019-17561Fix available7.5 High
- apache netbeans, oracle graalvm +1 moreImproper Certificate Validation in Apache NetbeansCVE-2019-17560Fix available9.1 Critical
- apache shiro, debian linux +1 moreImproper Authentication in Apache ShiroCVE-2020-1957Fix availableEPSS 23.3%9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...CVE-2020-1944Fix available9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...CVE-2019-17559Fix available9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...CVE-2019-17565Fix available9.8 Critical
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreInfinite Loop in Apache TikaCVE-2020-1951Fix available5.5 Medium
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreUncontrolled Resource Consumption in Apache TikaCVE-2020-1950Fix available5.5 Medium
- apache deltaspikeInjection in DeltaSpikeCVE-2019-12416Fix available6.1 Medium
- apache geodeApache Geode SSL endpoint verification vulnerabilityCVE-2019-10091Fix available7.4 High
- apache commons configuration, oracle database server, healthcare foundation +2 moreRemote code execution in Apache Commons ConfigurationCVE-2020-1953Fix available10.0 Critical
- apache shardingsphere, apache software foundation shardingsphere(incubator) +1 moreDeserialization of Untrusted Data in Apache ShardingSphereCVE-2020-1947Public exploitFix availableEPSS 33.9%9.8 Critical
- apache wss4j, red hat jbossws, apache cxf +8 more +10 moreUse of a Broken or Risky Cryptographic Algorithm in Apache WSS4JCVE-2011-2487Fix available5.9 Medium
- fasterxml jackson-databind, apache geode, redhat decision manager +5 more +7 morePolymorphic deserialization of malicious object in jackson-databindCVE-2019-14892Fix available7.5 High
- apache strutsCross-site Scripting in Apache StrutsCVE-2015-2992Fix available6.1 Medium
- apache tomcat, geode, blackberry good control +18 more +20 moreImproper Privilege Management in TomcatCVE-2020-1938In KEVPublic exploitFix availableEPSS 99.3%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache TomcatCVE-2020-1935Fix available4.8 Medium
- apache tomcat, tomee, debian linux +13 more +15 morePotential HTTP request smuggling in Apache TomcatCVE-2019-17569Fix available4.8 Medium
- apache kylinSQL Injection in KylinCVE-2020-1937Public exploitFix available8.8 High
- apache jcloudsIt was found that the jclouds scriptbuilder Statements class wrote a temporary file to a...CVE-2014-46519.8 Critical
- Show moreLoading…