Apache EPSS Rated Vulnerabilities
Apache vulnerabilities from the past 365 days which have an EPSS rating.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Remote Code Execution and Information Disclosure Vulnerability in Apache Tomcat Software
CVE-2025-24813ApacheApache Tomcat🥇📈👾🟡EPSS 94%🦅📰9.8CRITICALImproper Authentication Vulnerability in Apache Solr
CVE-2024-45216ApacheApache SolrEPSS 93%Flawed File Upload Logic in Apache Struts Exposes Vulnerability
CVE-2024-53677ApacheApache Struts🥇📈💰👾🟡EPSS 88%📰9.8CRITICALRace Condition Vulnerability in Apache Tomcat Leading to Remote Code Execution
CVE-2024-50379ApacheApache Tomcat🥇📈👾🟡EPSS 87%📰9.8CRITICALSnakeYaml Deserialization RCE Vulnerability in Apache HertzBeat (incubating)
CVE-2024-42323ApacheApache HertzbeatEPSS 64%Bypass/Injection Vulnerability in Apache Camel by Apache
CVE-2025-27636ApacheApache Camel👾EPSS 52%📰5.6MEDIUMRemote Code Execution Risk in Apache MINA ObjectSerializationDecoder
CVE-2024-52046ApacheApache Mina🥇📈EPSS 36%10CRITICALSQL Injection Vulnerability in Apache Traffic Control
CVE-2024-45387ApacheApache Traffic Control📈💰👾EPSS 31%📰8.8HIGHAuthentication Bypass Vulnerability in Apache HugeGraph-Server
CVE-2024-43441ApacheApache Hugegraph-server👾EPSS 27%📰Authorization Flaw in Apache NiFi Affecting Parameter Contexts and Controller Services
CVE-2024-56512Apache Software F...Nifi👾🟡EPSS 24%5.4MEDIUMRace Condition Vulnerability in Apache Tomcat Affects Multiple Versions
CVE-2024-56337ApacheApache Tomcat🥇📈👾EPSS 23%📰9.8CRITICALAccess Control Issue in Apache CloudStack Affects User Comments
CVE-2025-22828ApacheApache Cloudstack👾🟡EPSS 11%Invalid Filename Validation Vulnerability in Apache Subversion Repositories
CVE-2024-46901ApacheApache SubversionEPSS 11%4.3MEDIUMUncontrolled Resource Consumption in Apache Tomcat Affects Performance
CVE-2024-54677ApacheApache Tomcat5.3MEDIUMIncorrect Object Recycling Vulnerability Affects Apache Tomcat Versions
CVE-2024-52317ApacheApache Tomcat👾🟡6.5MEDIUMApplication Security Flaw in Apache Hive and Spark Affecting Cookie Signature Verification
CVE-2024-23945ApacheApache Hive5.9MEDIUMAuthentication Bypass Vulnerability in Apache Pinot
CVE-2024-56325ApacheApache PinotUnsecure Method in Apache Hive Metastore Leads to Remote Code Execution Vulnerability
CVE-2022-41137ApacheApache HiveIncorrect Object Recycling and Reuse Vulnerability in Apache Tomcat
CVE-2024-52318ApacheApache Tomcat👾🟡6.1MEDIUMDeserialization Vulnerability in Apache OpenMeetings by The Apache Software Foundation
CVE-2024-54676ApacheApache Openmeetings9.8CRITICALCommand Injection Vulnerability in Apache HertzBeat (incubating)
CVE-2024-45505ApacheApache HertzbeatAirflow Versions Before 2.10.3 Vulnerable to Logging Sensitive Configuration Variables
CVE-2024-45784ApacheApache AirflowArrow R Package Vulnerability: Deserialization of Untrusted Data Leads to Arbitrary Code Execution
CVE-2024-52338ApacheApache Arrow R PackageSSRF and Code Injection Vulnerability in Apache OFBiz (before 18.12.17)
CVE-2024-47208ApacheApache Ofbiz
No more vulnerabilities to load.