Apache: known exploited vulnerabilities
41Catalog entries
8Ransomware use
2026-10-08Last added
2026-10-11Latest due date
Get an email when Apache is next added.Watch Apache
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2016-3081 | Struts Apache Struts Command Injection Vulnerability |
2026-10-11 |
| CVE-2026-34486 | Tomcat Apache Tomcat Missing Encryption of Sensitive Data Vulnerability |
2026-08-07 |
| CVE-2026-34197 | ActiveMQ Apache ActiveMQ Improper Input Validation Vulnerability |
2026-04-30 |
| CVE-2024-38475 | HTTP Server Apache HTTP Server Improper Escaping of Output Vulnerability |
2025-05-22 |
| CVE-2025-24813 | Tomcat Apache Tomcat Path Equivalence Vulnerability |
2025-04-22 |
| CVE-2024-45195 | OFBiz Apache OFBiz Forced Browsing Vulnerability |
2025-02-25 |
| CVE-2024-27348 | HugeGraph-Server Apache HugeGraph-Server Improper Access Control Vulnerability |
2024-10-09 |
| CVE-2024-38856 | OFBiz Apache OFBiz Incorrect Authorization Vulnerability |
2024-09-17 |
| CVE-2024-32113 | OFBiz Apache OFBiz Path Traversal Vulnerability |
2024-08-28 |
| CVE-2020-17519 | Flink Apache Flink Improper Access Control Vulnerability |
2024-06-13 |
| CVE-2023-27524 | Superset Apache Superset Insecure Default Initialization of Resource Vulnerability |
2024-01-29 |
| CVE-2023-46604 | ActiveMQ RANSOMWARE Apache ActiveMQ Deserialization of Untrusted Data Vulnerability |
2023-11-23 |
| CVE-2023-33246 | RocketMQ Apache RocketMQ Command Execution Vulnerability |
2023-09-27 |
| CVE-2016-8735 | Tomcat Apache Tomcat Remote Code Execution Vulnerability |
2023-06-02 |
| CVE-2021-45046 | Log4j2 RANSOMWARE Apache Log4j2 Deserialization of Untrusted Data Vulnerability |
2023-05-22 |
| CVE-2022-33891 | Spark Apache Spark Command Injection Vulnerability |
2023-03-28 |
| CVE-2022-24112 | APISIX Apache APISIX Authentication Bypass Vulnerability |
2022-09-15 |
| CVE-2022-24706 | CouchDB Apache CouchDB Insecure Default Initialization of Resource Vulnerability |
2022-09-15 |
| CVE-2013-2251 | Struts Apache Struts Improper Input Validation Vulnerability |
2022-04-15 |
| CVE-2017-12615 | Tomcat RANSOMWARE Apache Tomcat on Windows Remote Code Execution Vulnerability |
2022-04-15 |
| CVE-2017-12617 | Tomcat Apache Tomcat Remote Code Execution Vulnerability |
2022-04-15 |
| CVE-2020-1956 | Kylin Apache Kylin OS Command Injection Vulnerability |
2022-04-15 |
| CVE-2020-1938 | Tomcat Apache Tomcat Improper Privilege Management Vulnerability |
2022-03-17 |
| CVE-2016-3088 | ActiveMQ Apache ActiveMQ Improper Input Validation Vulnerability |
2022-08-10 |
| CVE-2017-9791 | Struts 1 Apache Struts 1 Improper Input Validation Vulnerability |
2022-08-10 |
| CVE-2012-0391 | Struts 2 Apache Struts 2 Improper Input Validation Vulnerability |
2022-07-21 |
| CVE-2006-1547 | Struts 1 Apache Struts 1 ActionForm Denial-of-Service Vulnerability |
2022-07-21 |
| CVE-2020-13927 | Airflow's Experimental API Apache Airflow's Experimental API Authentication Bypass |
2022-07-18 |
| CVE-2020-11978 | Airflow Apache Airflow Command Injection |
2022-07-18 |
| CVE-2021-44228 | Log4j2 RANSOMWARE Apache Log4j2 Remote Code Execution Vulnerability |
2021-12-24 |
| CVE-2019-0193 | Solr Apache Solr DataImportHandler Code Injection Vulnerability |
2022-06-10 |
| CVE-2021-40438 | Apache RANSOMWARE Apache HTTP Server-Side Request Forgery (SSRF) |
2021-12-15 |
| CVE-2018-11776 | Struts Apache Struts Remote Code Execution Vulnerability |
2022-05-03 |
| CVE-2017-5638 | Struts RANSOMWARE Apache Struts Remote Code Execution Vulnerability |
2022-05-03 |
| CVE-2020-17530 | Struts Apache Struts Remote Code Execution Vulnerability |
2022-05-03 |
| CVE-2019-17558 | Solr Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability |
2022-05-03 |
| CVE-2016-4437 | Shiro Apache Shiro Code Execution Vulnerability |
2022-05-03 |
| CVE-2019-0211 | HTTP Server Apache HTTP Server Privilege Escalation Vulnerability |
2022-05-03 |
| CVE-2021-41773 | HTTP Server RANSOMWARE Apache HTTP Server Path Traversal Vulnerability |
2021-11-17 |
| CVE-2021-42013 | HTTP Server RANSOMWARE Apache HTTP Server Path Traversal Vulnerability |
2021-11-17 |
| CVE-2017-9805 | Struts Apache Struts Deserialization of Untrusted Data Vulnerability |
2022-05-03 |