Skip to content
OpenAdvisories

Vendor

Apache

91 known vulnerabilities.

Products

Apache HTTP Server 5 Apache Tomcat 5 OFBiz 4 Apache Tika 4 Apache OFBiz 4 VCL 3 Olingo 3 Apache Solr 2 Kafka 2 CXF 2 Apache SpamAssassin 2 Storm 2 Apache JSPWiki 2 Apache Archiva 2 Apache Fineract 2 Apache Camel 2 Apache Thrift 2 Apache Tapestry 2 HertzBeat 2 Apache CXF 2 Solr 2 Airflow 1 Dubbo 1 Apache Karaf 1 IoTDB 1 Shiro 1 Apache jclouds 1 Kylin 1 Apache Santuario - XML Security for Java 1 Apache Kylin 1 WSS4J 1 Apache ActiveMQ 1 activemq-artemis 1 Karaf 1 Apache Commons Configuration 1 Apache Mesos 1 Atlas 1 Apache Druid 1 Beam 1 Tomcat 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2020-9488 Public exploit

    Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

    Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.…

    Apache Apache Log4j apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven