Skip to content
OpenAdvisories

Vendor

Apache

91 known vulnerabilities.

Products

Apache HTTP Server 5 Apache Tomcat 5 OFBiz 4 Apache Tika 4 Apache OFBiz 4 VCL 3 Olingo 3 Apache Solr 2 Kafka 2 CXF 2 Apache SpamAssassin 2 Storm 2 Apache JSPWiki 2 Apache Archiva 2 Apache Fineract 2 Apache Camel 2 Apache Thrift 2 Apache Tapestry 2 HertzBeat 2 Apache CXF 2 Solr 2 Airflow 1 Dubbo 1 Apache Karaf 1 IoTDB 1 Shiro 1 Apache jclouds 1 Kylin 1 Apache Santuario - XML Security for Java 1 Apache Kylin 1 WSS4J 1 Apache ActiveMQ 1 activemq-artemis 1 Karaf 1 Apache Commons Configuration 1 Apache Mesos 1 Atlas 1 Apache Druid 1 Beam 1 Tomcat 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-1938 Exploited Public exploit EPSS 99%

    Improper Privilege Management in Tomcat

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

    Apache Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2019-17570 Public exploit EPSS 49%

    Insecure Deserialization in Apache XML-RPC

    An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Apache XML-R…

    Apache Apache XML-RPC org.apache.xmlrpc:xmlrpc libxmlrpc3-java Ubuntu Maven
  • Critical 9.8
    CVE-2019-12409 Public exploit EPSS 22%

    Unrestricted upload of file with dangerous type in Apache Solr

    The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, the…

    Apache Solr org.apache.solr:solr-core Maven
  • Critical 9.8
    CVE-2011-3923 Public exploit EPSS 89%

    Struts ParameterInterceptor vulnerability allows remote command execution

    Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

    Apache Struts org.apache.struts:struts2-core Maven