Apache Latest Vulnerabilities
Latest vulnerabilities published by apache
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Privilege Escalation Vulnerability in Apache Cassandra by The Apache Software Foundation
CVE-2025-26467ApacheApache Cassandra8.8HIGHImproper Output Neutralization Vulnerability in Apache Log4cxx
CVE-2025-54812ApacheApache Log4cxx2.1LOWImproper Output Neutralization Vulnerability in Apache Log4cxx by Apache
CVE-2025-54813ApacheApache Log4cxx6.3MEDIUMSQL Injection Vulnerability in Apache StreamPark by Apache
CVE-2024-48988ApacheApache Streampark7.6HIGHXML External Entity Injection Vulnerability in Apache Tika PDF Parsing Module
CVE-2025-54988ApacheApache Tika PDF Parser...9.8CRITICALServer-Side Request Forgery Vulnerability in Apache EventMesh Runtime
CVE-2024-39954ApacheApache Eventmesh Runtime6.3MEDIUMImproper Neutralization of Expression/Command Delimiters in Apache Commons OGNL
CVE-2025-53192ApacheApache Commons Ognl8.8HIGHCode Injection Vulnerability in Apache OFBiz Scrum Plugin
CVE-2025-54466ApacheApache Ofbiz6.3MEDIUMImproper Access Control in Apache Superset Allows Unauthorized Metadata Exposure
CVE-2025-55675ApacheApache Superset5.3MEDIUMBypass of Security Feature in Apache Superset by Apache
CVE-2025-55674ApacheApache Superset5.3MEDIUMStored Cross-Site Scripting Vulnerability in Apache Superset by Apache
CVE-2025-55672ApacheApache Superset5.3MEDIUMImproper Disclosure of Database Schema in Apache Superset by Apache
CVE-2025-55673ApacheApache Superset5.3MEDIUMMemory Allocation Flaw in Apache bRPC Redis Protocol Parser
CVE-2025-54472ApacheApache Brpc7.5HIGHSession Fixation Vulnerability in Apache Tomcat by Apache
CVE-2025-55668ApacheApache Tomcat6.5MEDIUMImproper Resource Shutdown Vulnerability in Apache Tomcat by Apache
CVE-2025-48989ApacheApache Tomcat7.5HIGHDeserialization Vulnerability in Apache Seata by Apache
CVE-2025-53606ApacheApache Seata (incubating)9.8CRITICALRMI and LDAP URL Configuration Vulnerability in Apache CXF
CVE-2025-48913ApacheApache Cxf9.8CRITICALMissing Origin Validation Vulnerability in Apache Zeppelin by Apache
CVE-2024-51775ApacheApache Zeppelin5.3MEDIUMCross-Site Scripting Vulnerability in Apache Zeppelin by Apache
CVE-2024-41177ApacheApache Zeppelin6.1MEDIUMImproper Input Validation in Apache Zeppelin by Apache
CVE-2024-52279ApacheApache Zeppelin5.3MEDIUMCross-Site Scripting Flaw in Apache JSPWiki Affects User Data Security
CVE-2025-24854ApacheApache Jspwiki6.1MEDIUMJavaScript Injection Vulnerability in Apache JSPWiki
CVE-2025-24853ApacheApache Jspwiki7.5HIGHImproper Output Neutralization Vulnerability in Apache Struts by Apache
CVE-2025-54656ApacheApache StrutsExpression Evaluation Bug in Apache HTTP Server by Apache
CVE-2025-54090ApacheApache Http Server6.3MEDIUMInsecure File Access Vulnerability in Apache Jena Affects Multiple Versions
CVE-2025-50151ApacheApache Jena8.8HIGH