KEV Watchbeta
home / vendors / apache

Apache: known exploited vulnerabilities

41Catalog entries
8Ransomware use
2026-10-08Last added
2026-10-11Latest due date
Get an email when Apache is next added.Watch Apache
CVEProduct / vulnerabilityAddedDue
CVE-2016-3081 Struts
Apache Struts Command Injection Vulnerability		 2026-10-082026-10-11
CVE-2026-34486 Tomcat
Apache Tomcat Missing Encryption of Sensitive Data Vulnerability		 2026-08-042026-08-07
CVE-2026-34197 ActiveMQ
Apache ActiveMQ Improper Input Validation Vulnerability		 2026-04-162026-04-30
CVE-2024-38475 HTTP Server
Apache HTTP Server Improper Escaping of Output Vulnerability		 2025-05-012025-05-22
CVE-2025-24813 Tomcat
Apache Tomcat Path Equivalence Vulnerability		 2025-04-012025-04-22
CVE-2024-45195 OFBiz
Apache OFBiz Forced Browsing Vulnerability		 2025-02-042025-02-25
CVE-2024-27348 HugeGraph-Server
Apache HugeGraph-Server Improper Access Control Vulnerability		 2024-09-182024-10-09
CVE-2024-38856 OFBiz
Apache OFBiz Incorrect Authorization Vulnerability		 2024-08-272024-09-17
CVE-2024-32113 OFBiz
Apache OFBiz Path Traversal Vulnerability		 2024-08-072024-08-28
CVE-2020-17519 Flink
Apache Flink Improper Access Control Vulnerability		 2024-05-232024-06-13
CVE-2023-27524 Superset
Apache Superset Insecure Default Initialization of Resource Vulnerability		 2024-01-082024-01-29
CVE-2023-46604 ActiveMQ RANSOMWARE
Apache ActiveMQ Deserialization of Untrusted Data Vulnerability		 2023-11-022023-11-23
CVE-2023-33246 RocketMQ
Apache RocketMQ Command Execution Vulnerability		 2023-09-062023-09-27
CVE-2016-8735 Tomcat
Apache Tomcat Remote Code Execution Vulnerability		 2023-05-122023-06-02
CVE-2021-45046 Log4j2 RANSOMWARE
Apache Log4j2 Deserialization of Untrusted Data Vulnerability		 2023-05-012023-05-22
CVE-2022-33891 Spark
Apache Spark Command Injection Vulnerability		 2023-03-072023-03-28
CVE-2022-24112 APISIX
Apache APISIX Authentication Bypass Vulnerability		 2022-08-252022-09-15
CVE-2022-24706 CouchDB
Apache CouchDB Insecure Default Initialization of Resource Vulnerability		 2022-08-252022-09-15
CVE-2013-2251 Struts
Apache Struts Improper Input Validation Vulnerability		 2022-03-252022-04-15
CVE-2017-12615 Tomcat RANSOMWARE
Apache Tomcat on Windows Remote Code Execution Vulnerability		 2022-03-252022-04-15
CVE-2017-12617 Tomcat
Apache Tomcat Remote Code Execution Vulnerability		 2022-03-252022-04-15
CVE-2020-1956 Kylin
Apache Kylin OS Command Injection Vulnerability		 2022-03-252022-04-15
CVE-2020-1938 Tomcat
Apache Tomcat Improper Privilege Management Vulnerability		 2022-03-032022-03-17
CVE-2016-3088 ActiveMQ
Apache ActiveMQ Improper Input Validation Vulnerability		 2022-02-102022-08-10
CVE-2017-9791 Struts 1
Apache Struts 1 Improper Input Validation Vulnerability		 2022-02-102022-08-10
CVE-2012-0391 Struts 2
Apache Struts 2 Improper Input Validation Vulnerability		 2022-01-212022-07-21
CVE-2006-1547 Struts 1
Apache Struts 1 ActionForm Denial-of-Service Vulnerability		 2022-01-212022-07-21
CVE-2020-13927 Airflow's Experimental API
Apache Airflow's Experimental API Authentication Bypass		 2022-01-182022-07-18
CVE-2020-11978 Airflow
Apache Airflow Command Injection		 2022-01-182022-07-18
CVE-2021-44228 Log4j2 RANSOMWARE
Apache Log4j2 Remote Code Execution Vulnerability		 2021-12-102021-12-24
CVE-2019-0193 Solr
Apache Solr DataImportHandler Code Injection Vulnerability		 2021-12-102022-06-10
CVE-2021-40438 Apache RANSOMWARE
Apache HTTP Server-Side Request Forgery (SSRF)		 2021-12-012021-12-15
CVE-2018-11776 Struts
Apache Struts Remote Code Execution Vulnerability		 2021-11-032022-05-03
CVE-2017-5638 Struts RANSOMWARE
Apache Struts Remote Code Execution Vulnerability		 2021-11-032022-05-03
CVE-2020-17530 Struts
Apache Struts Remote Code Execution Vulnerability		 2021-11-032022-05-03
CVE-2019-17558 Solr
Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability		 2021-11-032022-05-03
CVE-2016-4437 Shiro
Apache Shiro Code Execution Vulnerability		 2021-11-032022-05-03
CVE-2019-0211 HTTP Server
Apache HTTP Server Privilege Escalation Vulnerability		 2021-11-032022-05-03
CVE-2021-41773 HTTP Server RANSOMWARE
Apache HTTP Server Path Traversal Vulnerability		 2021-11-032021-11-17
CVE-2021-42013 HTTP Server RANSOMWARE
Apache HTTP Server Path Traversal Vulnerability		 2021-11-032021-11-17
CVE-2017-9805 Struts
Apache Struts Deserialization of Untrusted Data Vulnerability		 2021-11-032022-05-03