Skip to content
OpenAdvisories

Vendor

Apache

91 known vulnerabilities.

Products

Apache HTTP Server 5 Apache Tomcat 5 OFBiz 4 Apache Tika 4 Apache OFBiz 4 VCL 3 Olingo 3 Apache Solr 2 Kafka 2 CXF 2 Apache SpamAssassin 2 Storm 2 Apache JSPWiki 2 Apache Archiva 2 Apache Fineract 2 Apache Camel 2 Apache Thrift 2 Apache Tapestry 2 HertzBeat 2 Apache CXF 2 Solr 2 Airflow 1 Dubbo 1 Apache Karaf 1 IoTDB 1 Shiro 1 Apache jclouds 1 Kylin 1 Apache Santuario - XML Security for Java 1 Apache Kylin 1 WSS4J 1 Apache ActiveMQ 1 activemq-artemis 1 Karaf 1 Apache Commons Configuration 1 Apache Mesos 1 Atlas 1 Apache Druid 1 Beam 1 Tomcat 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2020-1956 Exploited Public exploit EPSS 97%

    Command Injection in Kylin

    Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.

    Apache Kylin org.apache.kylin:kylin-core-common Maven
    KEV Mar 25, 2022
  • High 7.2
    CVE-2019-0193 Exploited Public exploit EPSS 84%

    XML External Entity (XXE) Injection in Apache Solr

    In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen…

    Apache Apache Solr org.apache.solr:solr-core lucene-solr Debian Ubuntu Maven
    KEV Dec 10, 2021
  • High 7.8
    CVE-2019-0211 Exploited Public exploit EPSS 65%

    In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…

    Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
    KEV Nov 3, 2021