Known Vulnerabilities for Apache-ssl by Apache
Listed below are 10 of the newest known vulnerabilities associated with "Apache-ssl" by "Apache".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-40948 json | The Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or validate the OAuth 2.0 `state`... | Not Provided | 2026-04-18 | 2026-04-20 |
| CVE-2026-40542 json | Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-2... | Not Provided | 2026-04-22 | 2026-04-22 |
| CVE-2026-40046 json | Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT. The fix for "CVE... | Not Provided | 2026-04-09 | 2026-04-10 |
| CVE-2026-40023 json | Apache Log4cxx's XMLLayout https://logging.apache.org/log4cxx/1.7.0/classlog4cxx_1_1xml_1_1XMLLayout.html , in versions befo... | Not Provided | 2026-04-10 | 2026-04-10 |
| CVE-2026-40021 json | Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list and XmlLayoutS... | Not Provided | 2026-04-10 | 2026-04-10 |
| CVE-2026-39304 json | Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. Active... | Not Provided | 2026-04-10 | 2026-04-10 |
| CVE-2026-35573 json | ChurchCRM is an open-source church management system. Prior to 6.5.3, a path traversal vulnerability in ChurchCRM's backup re... | Not Provided | 2026-04-07 | 2026-04-08 |
| CVE-2026-35565 json | Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 De... | Not Provided | 2026-04-13 | 2026-04-13 |
| CVE-2026-35554 json | A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delive... | Not Provided | 2026-04-07 | 2026-04-07 |
| CVE-2026-35337 json | Deserialization of Untrusted Data vulnerability in Apache Storm. Versions Affected: before 2.8.6. Description: When proces... | Not Provided | 2026-04-13 | 2026-04-14 |