Apache Latest Vulnerabilities
Latest vulnerabilities published by apache
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
SQL Injection Vulnerability in Apache Flink CDC Product by Apache
CVE-2025-62228ApacheApache Flink Cdc5.1MEDIUMServer-Side Request Forgery Vulnerability in Apache Kylin by Apache
CVE-2025-61735ApacheApache Kylin7.3HIGHAuthentication Bypass Vulnerability in Apache Kylin Affects Users
CVE-2025-61733ApacheApache Kylin7.5HIGHFiles Accessible to External Parties in Apache Kylin by Apache
CVE-2025-61734ApacheApache Kylin7.5HIGHDeserialization Vulnerability in Pyfory and Legacy Pyfury Software
CVE-2025-61622ApacheApache Fory👾🟡9.8CRITICALSensitive Information Exposure in Apache Airflow 3.0.3
CVE-2025-54831ApacheApache Airflow6.5MEDIUMImproper Permission Check in Apache ZooKeeper Affects AdminServer Functionality
CVE-2025-58457ApacheApache Zookeeper4.3MEDIUMApache IoTDB Vulnerability in Version Range 1.3.3 to 2.0.4
CVE-2025-48392ApacheApache Iotdb7.5HIGHDeserialization Vulnerability in Apache IoTDB by Apache
CVE-2025-48459ApacheApache Iotdb5.3MEDIUMDenial of Service Vulnerability in Apache Fory Affects Remote Applications
CVE-2025-59328ApacheApache Fory6.5MEDIUMLDAP Injection Vulnerability in Apache HertzBeat Affects User Security
CVE-2025-48208ApacheApache Hertzbeat (incu...8.8HIGHXML Injection Vulnerability in Apache HertzBeat
CVE-2025-24404ApacheApache Hertzbeat (incu...8.8HIGHDeserialization Vulnerability in Apache Jackrabbit Core and JCR Commons
CVE-2025-58782ApacheApache Jackrabbit Core6.5MEDIUMIncorrect Default Permissions Vulnerability in Apache DolphinScheduler by Apache
CVE-2024-43166ApacheApache Dolphinscheduler9.8CRITICALImproper Input Validation in Apache DolphinScheduler by Apache
CVE-2024-43115ApacheApache Dolphinscheduler8.8HIGHRemote Code Execution Vulnerability in XAMPP WebDAV by Apache Friends
CVE-2012-10062Apache FriendsXampp👾🟡EPSS 50%8.7HIGHPrivilege Escalation Vulnerability in Apache Cassandra by The Apache Software Foundation
CVE-2025-26467ApacheApache Cassandra8.8HIGHImproper Output Neutralization Vulnerability in Apache Log4cxx
CVE-2025-54812ApacheApache Log4cxx2.1LOWImproper Output Neutralization Vulnerability in Apache Log4cxx by Apache
CVE-2025-54813ApacheApache Log4cxx6.3MEDIUMSQL Injection Vulnerability in Apache StreamPark by Apache
CVE-2024-48988ApacheApache Streampark7.6HIGHXML External Entity Injection Vulnerability in Apache Tika PDF Parsing Module
CVE-2025-54988ApacheApache Tika PDF Parser...👾🟡8.4HIGHServer-Side Request Forgery Vulnerability in Apache EventMesh Runtime
CVE-2024-39954ApacheApache Eventmesh Runtime6.3MEDIUMImproper Neutralization of Expression/Command Delimiters in Apache Commons OGNL
CVE-2025-53192ApacheApache Commons Ognl8.8HIGHCode Injection Vulnerability in Apache OFBiz Scrum Plugin
CVE-2025-54466ApacheApache Ofbiz6.3MEDIUMImproper Access Control in Apache Superset Allows Unauthorized Metadata Exposure
CVE-2025-55675ApacheApache Superset5.3MEDIUM