Skip to content
OpenAdvisories

Vendor

Apache

91 known vulnerabilities.

Products

Apache HTTP Server 5 Apache Tomcat 5 OFBiz 4 Apache Tika 4 Apache OFBiz 4 VCL 3 Olingo 3 Apache Solr 2 Kafka 2 CXF 2 Apache SpamAssassin 2 Storm 2 Apache JSPWiki 2 Apache Archiva 2 Apache Fineract 2 Apache Camel 2 Apache Thrift 2 Apache Tapestry 2 HertzBeat 2 Apache CXF 2 Solr 2 Airflow 1 Dubbo 1 Apache Karaf 1 IoTDB 1 Shiro 1 Apache jclouds 1 Kylin 1 Apache Santuario - XML Security for Java 1 Apache Kylin 1 WSS4J 1 Apache ActiveMQ 1 activemq-artemis 1 Karaf 1 Apache Commons Configuration 1 Apache Mesos 1 Atlas 1 Apache Druid 1 Beam 1 Tomcat 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-1938 Exploited Public exploit EPSS 99%

    Improper Privilege Management in Tomcat

    When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an atta…

    Apache Apache Tomcat tomcat8 tomcat9 Debian Ubuntu Maven
    KEV Mar 3, 2022