Apache EPSS Rated Vulnerabilities
Apache vulnerabilities from the past 365 days which have an EPSS rating.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Missing Encryption of Sensitive Data Vulnerability in Apache Tomcat
CVE-2026-34486ApacheApache Tomcat📈💰👾🟡EPSS 98%🦅📰7.5HIGHCode Injection Vulnerability in Apache ActiveMQ Broker Up to Version 6.2.2
CVE-2026-34197ApacheApache ActiveMQ Broker📈💰👾🟡EPSS 98%🦅📰8.8HIGHXML External Entity Injection in Apache Tika Products
CVE-2025-66516ApacheApache Tika Core👾🟡EPSS 89%📰10CRITICALMissing XML Validation Vulnerability in Apache Struts by Apache
CVE-2025-68493ApacheApache Struts👾🟡EPSS 50%📰8.1HIGHDouble Free and Remote Code Execution Vulnerability in Apache HTTP Server
CVE-2026-23918ApacheApache Http Server📈👾🟡EPSS 49%📰8.8HIGHMemory Allocation Vulnerability in Apache HTTP Server by Apache
CVE-2026-49975ApacheApache Http Server📈💰👾🟡EPSS 32%📰7.5HIGHRemote Command Injection in Apache bRPC Heap Profiler Service
CVE-2025-60021ApacheApache Brpc👾🟡EPSS 25%9.8CRITICALRemote Code Execution Vulnerability in Apache OFBiz by Apache
CVE-2026-45434ApacheApache OfbizEPSS 21%9.8CRITICALMessage Header Injection Vulnerability in Apache Camel CXF and Knative
CVE-2026-47323ApacheApache Camel👾🟡EPSS 19%9.8CRITICALUser ID Creation Vulnerability in Apache StreamPipes by Apache
CVE-2025-47411ApacheApache StreampipesEPSS 15%8.1HIGHUntrusted Java Deserialization Vulnerability in Apache OpenNLP
CVE-2026-43825ApacheApache Opennlp :: Core...EPSS 13%7.3HIGHJava Deserialization Vulnerability in Apache Causeway
CVE-2025-64408ApacheApache CausewayEPSS 11%6.3MEDIUMMissing Authentication in Apache Artemis and ActiveMQ Messaging Services
CVE-2026-27446ApacheApache ArtemisEPSS 11%9.3CRITICALRemote Code Execution Vulnerability in Apache Camel's CoAP Component
CVE-2026-33453ApacheApache Camel👾🟡10CRITICALPadding Oracle Vulnerability in Apache Tomcat by the Apache Software Foundation
CVE-2026-29146ApacheApache Tomcat7.5HIGHCode Execution Vulnerability in Apache Spark History Server
CVE-2025-54920ApacheApache Spark8.8HIGHCode Injection Vulnerability in Apache ActiveMQ by Apache
CVE-2026-40466ApacheApache ActiveMQ Broker8.8HIGHToken Validation Flaw in Apache CXF Affects Multiple Resource Servers
CVE-2026-50627ApacheApache Cxf9.1CRITICALImproper Neutralization of HTML Tags in Apache Tomcat Web Application
CVE-2026-50229ApacheApache Tomcat6.1MEDIUMBasic Authentication Flaw in Apache Solr Affects User Security
CVE-2026-44825ApacheApache Solr👾🟡8.1HIGHCommand Injection Vulnerability in Apache Continuum by Apache
CVE-2016-15057ApacheApache Continuum9.9CRITICALSQL Injection Vulnerability in Apache Fineract's Report Execution API
CVE-2026-35152ApacheApache Fineract8.8HIGHCommand Injection Vulnerability in Apache CloudStack Affecting System VMs and Virtual Routers
CVE-2026-61400ApacheApache Cloudstack8.8HIGHMissing Authentication Step in Apache Tomcat Affects Multiple Versions
CVE-2026-55957ApacheApache Tomcat👾🟡7.3HIGHCommand Injection Vulnerability in Apache Ranger Software by Apache
CVE-2026-28672ApacheApache Ranger👾🟡9.8CRITICAL