Known Vulnerabilities for products from Apache
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Apache".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102511 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-102510 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-102509 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-102508 json | Not Provided | 2026-09-30 | 2026-09-30 | |
| CVE-2026-102497 json | Not Provided | 2026-09-29 | 2026-09-29 | |
| CVE-2026-102496 json | Not Provided | 2026-09-29 | 2026-09-29 | |
| CVE-2026-102495 json | Not Provided | 2026-09-29 | 2026-09-29 | |
| CVE-2026-101292 json | Not Provided | 2026-09-28 | 2026-09-29 | |
| CVE-2026-100717 json | Not Provided | 2026-09-26 | 2026-09-30 | |
| CVE-2026-100669 json | Not Provided | 2026-09-26 | 2026-09-30 | |
| CVE-2026-92001 json | Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS. Th... | Not Provided | 2026-09-23 | 2026-09-30 |
| CVE-2026-91999 json | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. Th... | Not Provided | 2026-09-23 | 2026-09-30 |
| CVE-2026-91928 json | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. Th... | Not Provided | 2026-09-23 | 2026-09-30 |
| CVE-2026-91867 json | When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that tri... | Not Provided | 2026-09-21 | 2026-09-25 |
| CVE-2026-91866 json | A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amounts of work, pin... | Not Provided | 2026-09-21 | 2026-09-25 |
| CVE-2026-91865 json | A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references exponentially d... | Not Provided | 2026-09-21 | 2026-09-25 |
| CVE-2026-91864 json | A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory ... | Not Provided | 2026-09-21 | 2026-09-25 |
| CVE-2026-91863 json | A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust... | Not Provided | 2026-09-21 | 2026-09-24 |
| CVE-2026-91852 json | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. Th... | Not Provided | 2026-09-23 | 2026-09-30 |
| CVE-2026-87976 json | Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group,... | Not Provided | 2026-09-16 | 2026-09-21 |
Known software with vulnerabilities from Apache
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Apache | Accumulo | 1.10.0 |
| Application | Apache | Activemq | - |
| Application | Apache | Activemq Apollo | 1.0 |
| Application | Apache | Activemq Artemis | - |
| Application | Apache | Airflow | 0.1 |
| Application | Apache | Allura | 1.0.0 |
| Application | Apache | Ambari | 0.9 |
| Application | Apache | Amqp 0-x Jms Client | 6.0.3 |
| Application | Apache | Amqp Jms Client | 0.9.0 |
| Application | Apache | Ant | 1.1 |
| Application | Apache | Apache-ssl | 1.37 |
| Application | Apache | Apache Test | - |
| Application | Apache | Apisix | 1.2 |
| Application | Apache | Apr-util | 0.9.1 |
| Application | Apache | Archiva | 0.9 |
| Application | Apache | Arrow | 0.1.0 |
| Application | Apache | Asterixdb | - |
| Application | Apache | Atlas | 0.5.0 |
| Application | Apache | Axis | - |
| Application | Apache | Axis2 | - |