netVigilance Vulnerability intelligence since 2004

Apache

40 Apache vulnerabilities with confirmed exploitation in the wild, as published by CISA; 40 past the federal remediation deadline. This is a static slice of the catalog — open the full catalog for search and filters.

Known exploited vulnerabilities for Apache
Vulnerability Status
overdue 40d2026-08-07 CVE-2026-34486 Apache / Tomcat Apache Tomcat Missing Encryption of Sensitive Data Vulnerability 2026-08-04 7.5 past due
overdue 139d2026-04-30 CVE-2026-34197 Apache / ActiveMQ Apache ActiveMQ Improper Input Validation Vulnerability 2026-04-16 8.8 past due
overdue 482d2025-05-22 CVE-2024-38475 Apache / HTTP Server Apache HTTP Server Improper Escaping of Output Vulnerability 2025-05-01 9.1 past due
overdue 512d2025-04-22 CVE-2025-24813 Apache / Tomcat Apache Tomcat Path Equivalence Vulnerability 2025-04-01 9.8 past due
overdue 568d2025-02-25 CVE-2024-45195 Apache / OFBiz Apache OFBiz Forced Browsing Vulnerability 2025-02-04 7.5 past due
overdue 707d2024-10-09 CVE-2024-27348 Apache / HugeGraph-Server Apache HugeGraph-Server Improper Access Control Vulnerability 2024-09-18 9.8 past due
overdue 729d2024-09-17 CVE-2024-38856 Apache / OFBiz Apache OFBiz Incorrect Authorization Vulnerability 2024-08-27 9.8 past due
overdue 749d2024-08-28 CVE-2024-32113 Apache / OFBiz Apache OFBiz Path Traversal Vulnerability 2024-08-07 9.8 past due
overdue 825d2024-06-13 CVE-2020-17519 Apache / Flink Apache Flink Improper Access Control Vulnerability 2024-05-23 7.5 past due
overdue 961d2024-01-29 CVE-2023-27524 Apache / Superset Apache Superset Insecure Default Initialization of Resource Vulnerability 2024-01-08 9.8 past due
overdue 1028d2023-11-23 CVE-2023-46604 Apache / ActiveMQ Apache ActiveMQ Deserialization of Untrusted Data Vulnerability 2023-11-02 9.8 past dueransomware
overdue 1085d2023-09-27 CVE-2023-33246 Apache / RocketMQ Apache RocketMQ Command Execution Vulnerability 2023-09-06 9.8 past due
overdue 1202d2023-06-02 CVE-2016-8735 Apache / Tomcat Apache Tomcat Remote Code Execution Vulnerability 2023-05-12 9.8 past due
overdue 1213d2023-05-22 CVE-2021-45046 Apache / Log4j2 Apache Log4j2 Deserialization of Untrusted Data Vulnerability 2023-05-01 9.0 past dueransomware
overdue 1268d2023-03-28 CVE-2022-33891 Apache / Spark Apache Spark Command Injection Vulnerability 2023-03-07 8.8 past due
overdue 1462d2022-09-15 CVE-2022-24706 Apache / CouchDB Apache CouchDB Insecure Default Initialization of Resource Vulnerability 2022-08-25 9.8 past due
overdue 1462d2022-09-15 CVE-2022-24112 Apache / APISIX Apache APISIX Authentication Bypass Vulnerability 2022-08-25 9.8 past due
overdue 1615d2022-04-15 CVE-2020-1956 Apache / Kylin Apache Kylin OS Command Injection Vulnerability 2022-03-25 8.8 past due
overdue 1615d2022-04-15 CVE-2017-12617 Apache / Tomcat Apache Tomcat Remote Code Execution Vulnerability 2022-03-25 8.1 past due
overdue 1615d2022-04-15 CVE-2017-12615 Apache / Tomcat Apache Tomcat on Windows Remote Code Execution Vulnerability 2022-03-25 8.1 past dueransomware
overdue 1615d2022-04-15 CVE-2013-2251 Apache / Struts Apache Struts Improper Input Validation Vulnerability 2022-03-25 9.8 past due
overdue 1644d2022-03-17 CVE-2020-1938 Apache / Tomcat Apache Tomcat Improper Privilege Management Vulnerability 2022-03-03 9.8 past due
overdue 1498d2022-08-10 CVE-2017-9791 Apache / Struts 1 Apache Struts 1 Improper Input Validation Vulnerability 2022-02-10 9.8 past due
overdue 1498d2022-08-10 CVE-2016-3088 Apache / ActiveMQ Apache ActiveMQ Improper Input Validation Vulnerability 2022-02-10 9.8 past due
overdue 1518d2022-07-21 CVE-2012-0391 Apache / Struts 2 Apache Struts 2 Improper Input Validation Vulnerability 2022-01-21 9.8 past due
overdue 1518d2022-07-21 CVE-2006-1547 Apache / Struts 1 Apache Struts 1 ActionForm Denial-of-Service Vulnerability 2022-01-21 7.5 past due
overdue 1521d2022-07-18 CVE-2020-13927 Apache / Airflow's Experimental API Apache Airflow's Experimental API Authentication Bypass 2022-01-18 9.8 past due
overdue 1521d2022-07-18 CVE-2020-11978 Apache / Airflow Apache Airflow Command Injection 2022-01-18 8.8 past due
overdue 1727d2021-12-24 CVE-2021-44228 Apache / Log4j2 Apache Log4j2 Remote Code Execution Vulnerability 2021-12-10 10.0 past dueransomware
overdue 1559d2022-06-10 CVE-2019-0193 Apache / Solr Apache Solr DataImportHandler Code Injection Vulnerability 2021-12-10 7.2 past due
overdue 1736d2021-12-15 CVE-2021-40438 Apache / Apache Apache HTTP Server-Side Request Forgery (SSRF) 2021-12-01 9.0 past dueransomware
overdue 1764d2021-11-17 CVE-2021-42013 Apache / HTTP Server Apache HTTP Server Path Traversal Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1764d2021-11-17 CVE-2021-41773 Apache / HTTP Server Apache HTTP Server Path Traversal Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1597d2022-05-03 CVE-2020-17530 Apache / Struts Apache Struts Remote Code Execution Vulnerability 2021-11-03 9.8 past due
overdue 1597d2022-05-03 CVE-2019-17558 Apache / Solr Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability 2021-11-03 7.5 past due
overdue 1597d2022-05-03 CVE-2019-0211 Apache / HTTP Server Apache HTTP Server Privilege Escalation Vulnerability 2021-11-03 7.8 past due
overdue 1597d2022-05-03 CVE-2018-11776 Apache / Struts Apache Struts Remote Code Execution Vulnerability 2021-11-03 8.1 past due
overdue 1597d2022-05-03 CVE-2017-9805 Apache / Struts Apache Struts Deserialization of Untrusted Data Vulnerability 2021-11-03 8.1 past due
overdue 1597d2022-05-03 CVE-2017-5638 Apache / Struts Apache Struts Remote Code Execution Vulnerability 2021-11-03 9.8 past dueransomware
overdue 1597d2022-05-03 CVE-2016-4437 Apache / Shiro Apache Shiro Code Execution Vulnerability 2021-11-03 9.8 past due
40 records Open in catalog with filters →