HackZoneLabs News
Newsletter

Apache

41 vulnerabilities in Apache products that CISA lists as exploited.

CVEVendorProductNameAddedFix dueRansomware
CVE-2016-3081ApacheStrutsApache Struts Command Injection Vulnerability8 Oct 202611 Oct 2026Unknown
CVE-2026-34486ApacheTomcatApache Tomcat Missing Encryption of Sensitive Data Vulnerability4 Aug 20267 Aug 2026Unknown
CVE-2026-34197ApacheActiveMQApache ActiveMQ Improper Input Validation Vulnerability16 Apr 202630 Apr 2026Unknown
CVE-2024-38475ApacheHTTP ServerApache HTTP Server Improper Escaping of Output Vulnerability1 May 202522 May 2025Unknown
CVE-2025-24813ApacheTomcatApache Tomcat Path Equivalence Vulnerability1 Apr 202522 Apr 2025Unknown
CVE-2024-45195ApacheOFBizApache OFBiz Forced Browsing Vulnerability4 Feb 202525 Feb 2025Unknown
CVE-2024-27348ApacheHugeGraph-ServerApache HugeGraph-Server Improper Access Control Vulnerability18 Sep 20249 Oct 2024Unknown
CVE-2024-38856ApacheOFBizApache OFBiz Incorrect Authorization Vulnerability27 Aug 202417 Sep 2024Unknown
CVE-2024-32113ApacheOFBizApache OFBiz Path Traversal Vulnerability7 Aug 202428 Aug 2024Unknown
CVE-2020-17519ApacheFlinkApache Flink Improper Access Control Vulnerability23 May 202413 Jun 2024Unknown
CVE-2023-27524ApacheSupersetApache Superset Insecure Default Initialization of Resource Vulnerability8 Jan 202429 Jan 2024Unknown
CVE-2023-46604ApacheActiveMQApache ActiveMQ Deserialization of Untrusted Data Vulnerability2 Nov 202323 Nov 2023Known
CVE-2023-33246ApacheRocketMQApache RocketMQ Command Execution Vulnerability6 Sep 202327 Sep 2023Unknown
CVE-2016-8735ApacheTomcatApache Tomcat Remote Code Execution Vulnerability12 May 20232 Jun 2023Unknown
CVE-2021-45046ApacheLog4j2Apache Log4j2 Deserialization of Untrusted Data Vulnerability1 May 202322 May 2023Known
CVE-2022-33891ApacheSparkApache Spark Command Injection Vulnerability7 Mar 202328 Mar 2023Unknown
CVE-2022-24112ApacheAPISIXApache APISIX Authentication Bypass Vulnerability25 Aug 202215 Sep 2022Unknown
CVE-2022-24706ApacheCouchDBApache CouchDB Insecure Default Initialization of Resource Vulnerability25 Aug 202215 Sep 2022Unknown
CVE-2013-2251ApacheStrutsApache Struts Improper Input Validation Vulnerability25 Mar 202215 Apr 2022Unknown
CVE-2017-12615ApacheTomcatApache Tomcat on Windows Remote Code Execution Vulnerability25 Mar 202215 Apr 2022Known
CVE-2017-12617ApacheTomcatApache Tomcat Remote Code Execution Vulnerability25 Mar 202215 Apr 2022Unknown
CVE-2020-1956ApacheKylinApache Kylin OS Command Injection Vulnerability25 Mar 202215 Apr 2022Unknown
CVE-2020-1938ApacheTomcatApache Tomcat Improper Privilege Management Vulnerability3 Mar 202217 Mar 2022Unknown
CVE-2016-3088ApacheActiveMQApache ActiveMQ Improper Input Validation Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2017-9791ApacheStruts 1Apache Struts 1 Improper Input Validation Vulnerability10 Feb 202210 Aug 2022Unknown
CVE-2006-1547ApacheStruts 1Apache Struts 1 ActionForm Denial-of-Service Vulnerability21 Jan 202221 Jul 2022Unknown
CVE-2012-0391ApacheStruts 2Apache Struts 2 Improper Input Validation Vulnerability21 Jan 202221 Jul 2022Unknown
CVE-2020-11978ApacheAirflowApache Airflow Command Injection18 Jan 202218 Jul 2022Unknown
CVE-2020-13927ApacheAirflow's Experimental APIApache Airflow's Experimental API Authentication Bypass18 Jan 202218 Jul 2022Unknown
CVE-2019-0193ApacheSolrApache Solr DataImportHandler Code Injection Vulnerability10 Dec 202110 Jun 2022Unknown
CVE-2021-44228ApacheLog4j2Apache Log4j2 Remote Code Execution Vulnerability10 Dec 202124 Dec 2021Known
CVE-2021-40438ApacheApacheApache HTTP Server-Side Request Forgery (SSRF)1 Dec 202115 Dec 2021Known
CVE-2016-4437ApacheShiroApache Shiro Code Execution Vulnerability3 Nov 20213 May 2022Unknown
CVE-2017-5638ApacheStrutsApache Struts Remote Code Execution Vulnerability3 Nov 20213 May 2022Known
CVE-2017-9805ApacheStrutsApache Struts Deserialization of Untrusted Data Vulnerability3 Nov 20213 May 2022Unknown
CVE-2018-11776ApacheStrutsApache Struts Remote Code Execution Vulnerability3 Nov 20213 May 2022Unknown
CVE-2019-0211ApacheHTTP ServerApache HTTP Server Privilege Escalation Vulnerability3 Nov 20213 May 2022Unknown
CVE-2019-17558ApacheSolrApache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability3 Nov 20213 May 2022Unknown
CVE-2020-17530ApacheStrutsApache Struts Remote Code Execution Vulnerability3 Nov 20213 May 2022Unknown
CVE-2021-41773ApacheHTTP ServerApache HTTP Server Path Traversal Vulnerability3 Nov 202117 Nov 2021Known
CVE-2021-42013ApacheHTTP ServerApache HTTP Server Path Traversal Vulnerability3 Nov 202117 Nov 2021Known