Apache

91 results · Feed

• Medium 6.4
  CVE-2025-58712

  Amq: privilege escalation via excessive /etc/passwd permissions

  A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an aff…

  Red Hat Apache Red Hat AMQ Broker 7 activemq-artemis
  Oct 22, 2025
• High 8.8
  CVE-2024-42362

  GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import

  Hertzbeat is an open source, real-time monitoring system. Hertzbeat has an authenticated (user role) RCE via unsafe deserialization in /api/monitors/import. This vulnerability is fixed in 1.6.0.

  Apache HertzBeat
  Aug 20, 2024
• High 7.5
  CVE-2024-42361

  GHSL-2023-256: HertzBeat Authenticated (guest role) SQL injection in /api/monitor/{monitorId}/metric/{metricFull}

  Hertzbeat is an open source, real-time monitoring system. Hertzbeat 1.6.0 and earlier declares a /api/monitor/{monitorId}/metric/{metricFull} endpoint to download job metrics. In the process, it executes a SQL query with user-controlled data, allowing for SQL…

  Apache HertzBeat
  Aug 20, 2024
• Critical 9.8
  CVE-2021-32824

  Regular expression Denial of Service in MooTools

  Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Han…

  Apache Dubbo org.apache.dubbo:dubbo-parent Maven
  Jan 3, 2023
• Medium 6.5
  CVE-2021-25958

  Generation of Error Message Containing Sensitive Information in Apache OFBiz

  In Apache Ofbiz, versions v17.12.01 to v17.12.07 implement a try catch exception to handle errors at multiple locations but leaks out sensitive table info which may aid the attacker for further recon. A user can register with a very long password, but when he…

  Apache ofbiz-framework
  Aug 30, 2021
• High 7.5
  CVE-2020-11996 Public exploit EPSS 27%

  Uncontrolled Resource Consumption in Apache Tomcat

  A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 conne…

  Apache Apache Tomcat org.apache.tomcat:tomcat tomcat8 Debian Ubuntu Maven
  Jun 26, 2020
• High 8.8
  CVE-2020-1956 Exploited Public exploit EPSS 97%

  Command Injection in Kylin

  Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.

  Apache Kylin org.apache.kylin:kylin-core-common Maven
  May 22, 2020

  KEV Mar 25, 2022
• Unscored —
  CVE-2019-0235 Public exploit EPSS 33%

  Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.

  Apache Apache OFBiz
  Apr 30, 2020
• Unscored —
  CVE-2019-12425

  Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host

  Apache Apache OFBiz
  Apr 30, 2020
• Medium 6.5
  CVE-2020-9482

  Insufficient Session Expiration in Apache NiFi Registry

  If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mechanism other than PKI, when the user clicks Log Out, NiFi Registry invalidates the authentication token on the client side but not on the server side. This permits the user's client-side token to be us…

  Apache Apache NiFi Registry org.apache.nifi.registry:nifi-registry-web-api Maven
  Apr 28, 2020
• Unscored —
  CVE-2020-9481

  Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read attack.

  Apache ATS trafficserver trafficserver Debian Ubuntu
  Apr 27, 2020
• Critical 9.8
  CVE-2020-1952

  Improper Certificate Validation in Apache IoTDB

  An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely.

  Apache IoTDB org.apache.iotdb:iotdb-parent Maven
  Apr 27, 2020
• Low 3.7
  CVE-2020-9488 Public exploit

  Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

  Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.…

  Apache Apache Log4j apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
  Apr 27, 2020
• Unscored —
  CVE-2020-1927 EPSS 57%

  In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential …

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 1, 2020
• Medium 6.5
  CVE-2020-1958 Public exploit

  Credentials bypass in Apache Druid

  When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the credentialsValidator.userSearch filter barrier that determines if a valid LDAP user is allowed to authenticate with Druid. Th…

  Apache Apache Druid org.apache.druid:druid Maven
  Apr 1, 2020
• Medium —
  CVE-2019-17564 Public exploit EPSS 37%

  Deserialization of Untrusted Data in Apache Dubbo

  Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. An attacker may submit a POST request with a Java object in it to completely compromise a Provider instance of Apache Dubbo, if this instance enables HTTP. This issue af…

  Apache Apache Dubbo org.apache.dubbo:dubbo-rpc-http-invoker Maven
  Apr 1, 2020
• Medium 4.3
  CVE-2018-11802

  Incorrect Authorization in Apache Solr

  In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serv…

  Apache Apache Solr org.apache.solr:solr-core lucene-solr Ubuntu Maven
  Apr 1, 2020
• Medium 5.3
  CVE-2020-1954

  Apache CXF JMX Integration is vulnerable to a MITM attack

  Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a man-in…

  Apache Apache CXF org.apache.cxf:cxf-rt-management Maven
  Apr 1, 2020
• Unscored —
  CVE-2020-1934 EPSS 52%

  In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP serv…

  Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Apr 1, 2020
• Unscored —
  CVE-2020-1943 EPSS 97%

  Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.

  Apache Apache OFBiz
  Apr 1, 2020
• Medium 5.5
  CVE-2020-1950

  Uncontrolled Resource Consumption in Apache Tika

  A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

  Apache Apache Tika tika tika Debian Ubuntu Maven
  Mar 23, 2020
• Critical 10.0
  CVE-2020-1953

  Remote code execution in Apache Commons Configuration

  Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default …

  Apache Apache Commons Configuration org.apache.commons:commons-configuration2 commons-configuration2 Debian Ubuntu Maven
  Mar 13, 2020
• Medium 5.9
  CVE-2011-2487

  Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J

  The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

  Red Hat Apache JBossWS WSS4J Maven
  Mar 11, 2020
• Critical 9.8
  CVE-2020-1938 Exploited Public exploit EPSS 99%

  Improper Privilege Management in Tomcat

  When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

  Apache Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
  Feb 24, 2020

  KEV Mar 3, 2022
• Medium 4.8
  CVE-2020-1935

  Potential HTTP request smuggling in Apache Tomcat

  In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if …

  Apache Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  Feb 24, 2020
• Medium 4.8
  CVE-2019-17569

  Potential HTTP request smuggling in Apache Tomcat

  The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Reque…

  Apache Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Maven
  Feb 24, 2020
• Medium 6.5
  CVE-2020-1937 Public exploit

  SQL Injection in Kylin

  Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.

  Apache Apache Kylin org.apache.kylin:kylin-server-base Maven
  Feb 24, 2020
• Unscored —
  CVE-2014-4651

  It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attac…

  Apache Apache jclouds
  Feb 18, 2020
• Unscored —
  CVE-2019-12426

  an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache …

  Apache Apache OFBiz
  Feb 6, 2020
• Critical 9.8
  CVE-2019-17570 Public exploit EPSS 49%

  Insecure Deserialization in Apache XML-RPC

  An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-R…

  Apache Apache XML-RPC org.apache.xmlrpc:xmlrpc libxmlrpc3-java Ubuntu Maven
  Jan 23, 2020
• Medium 6.1
  CVE-2019-17573 Public exploit

  Reflected Cross-Site Scripting in Apache CXF

  By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web p…

  Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven
  Jan 16, 2020
• High 7.5
  CVE-2019-12423

  Private key leak in Apache CXF

  Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local …

  Apache CXF org.apache.cxf:cxf org.apache.cxf:apache-cxf Maven
  Jan 16, 2020
• High 7.5
  CVE-2020-1929

  Improper Certificate Validation in Apache Beam

  The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets re…

  Apache Beam org.apache.beam:beam-sdks-java-io-mongodb Maven
  Jan 15, 2020
• Medium 4.8
  CVE-2019-12398

  XSS in Apache Airflow

  In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. The new "RBAC" UI is unaffected.

  Apache Airflow apache-airflow PyPI
  Jan 14, 2020
• High 7.5
  CVE-2019-12399

  Exposure of Sensitive Information to an Unauthorized Actor in Apache Kafka

  When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized secret variable in a substring of a con…

  Apache Kafka org.apache.kafka:kafka Maven
  Jan 14, 2020
• Critical 9.8
  CVE-2019-0219

  Privilege Escalation in cordova-plugin-inappbrowser

  A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI.

  Apache Cordova cordova-plugin-inappbrowser npm
  Jan 14, 2020
• Unscored —
  CVE-2019-12420

  In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.…

  Apache Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine
  Dec 12, 2019
• Unscored —
  CVE-2018-11805

  In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or …

  Apache Apache SpamAssassin spamassassin spamassassin Debian Ubuntu Alpine
  Dec 12, 2019
• High 7.5
  CVE-2019-17555

  Improper input validation in Apache Olingo

  The AsyncResponseWrapperImpl class in Apache Olingo versions 4.0.0 to 4.6.0 reads the Retry-After header and passes it to the Thread.sleep() method without any check. If a malicious server returns a huge value in the header, then it can help to implement a Do…

  Apache Olingo org.apache.olingo:odata-client-core Maven
  Dec 4, 2019
• Critical 9.8
  CVE-2019-17556

  Deserialization of Untrusted Data in Apache Olingo

  Apache Olingo versions 4.0.0 to 4.6.0 provide the AbstractService class, which is public API, uses ObjectInputStream and doesn't check classes being deserialized. If an attacker can feed malicious metadata to the class, then it may result in running attacker'…

  Apache Olingo org.apache.olingo:odata-client-proxy Maven
  Dec 4, 2019