Apache Latest Vulnerabilities
Latest vulnerabilities published by apache
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Remote Code Execution in Apache Syncope Due to Groovy Code Injection Vulnerability
CVE-2025-57738ApacheApache Syncope7.2HIGHCSRF Vulnerability in Apache Geode Management and Monitoring API
CVE-2025-47410ApacheApache Geode8.8HIGHInefficient Regular Expression Complexity Vulnerability in Apache Traffic Control
CVE-2025-61581ApacheApache Traffic Control7.5HIGHDeserialization Vulnerability in Apache ActiveMQ NMS AMQP Client
CVE-2025-54539ApacheApache ActiveMQ Nms AM...9.8CRITICALVulnerability in Apache Spark with Insecure Default Network Encryption
CVE-2025-55039ApacheApache Spark6.5MEDIUMCross-site Scripting Vulnerability in Apache Geode Web-API
CVE-2024-44088ApacheApache Geode6.1MEDIUMIncorrect Execution-Assigned Permissions Vulnerability in Apache StreamPark
CVE-2025-30001ApacheApache Streampark7.3HIGHSQL Injection Vulnerability in Apache Flink CDC Product by Apache
CVE-2025-62228ApacheApache Flink Cdc5.1MEDIUMServer-Side Request Forgery Vulnerability in Apache Kylin by Apache
CVE-2025-61735ApacheApache Kylin7.3HIGHAuthentication Bypass Vulnerability in Apache Kylin Affects Users
CVE-2025-61733ApacheApache Kylin7.5HIGHFiles Accessible to External Parties in Apache Kylin by Apache
CVE-2025-61734ApacheApache Kylin7.5HIGHDeserialization Vulnerability in Pyfory and Legacy Pyfury Software
CVE-2025-61622ApacheApache Fory👾🟡9.8CRITICALSensitive Information Exposure in Apache Airflow 3.0.3
CVE-2025-54831ApacheApache Airflow6.5MEDIUMImproper Permission Check in Apache ZooKeeper Affects AdminServer Functionality
CVE-2025-58457ApacheApache Zookeeper4.3MEDIUMApache IoTDB Vulnerability in Version Range 1.3.3 to 2.0.4
CVE-2025-48392ApacheApache Iotdb7.5HIGHDeserialization Vulnerability in Apache IoTDB by Apache
CVE-2025-48459ApacheApache Iotdb5.3MEDIUMDenial of Service Vulnerability in Apache Fory Affects Remote Applications
CVE-2025-59328ApacheApache Fory6.5MEDIUMLDAP Injection Vulnerability in Apache HertzBeat Affects User Security
CVE-2025-48208ApacheApache Hertzbeat (incu...8.8HIGHXML Injection Vulnerability in Apache HertzBeat
CVE-2025-24404ApacheApache Hertzbeat (incu...8.8HIGHDeserialization Vulnerability in Apache Jackrabbit Core and JCR Commons
CVE-2025-58782ApacheApache Jackrabbit Core6.5MEDIUMIncorrect Default Permissions Vulnerability in Apache DolphinScheduler by Apache
CVE-2024-43166ApacheApache Dolphinscheduler9.8CRITICALImproper Input Validation in Apache DolphinScheduler by Apache
CVE-2024-43115ApacheApache Dolphinscheduler8.8HIGHRemote Code Execution Vulnerability in XAMPP WebDAV by Apache Friends
CVE-2012-10062Apache FriendsXampp👾🟡EPSS 50%8.7HIGHPrivilege Escalation Vulnerability in Apache Cassandra by The Apache Software Foundation
CVE-2025-26467ApacheApache Cassandra8.8HIGHImproper Output Neutralization Vulnerability in Apache Log4cxx
CVE-2025-54812ApacheApache Log4cxx2.1LOW