Known Vulnerabilities for products from Apache
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Apache".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-23945 | Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1. | Not Provided | 2022-01-25 | 2022-01-26 |
| CVE-2022-23944 | User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1. | Not Provided | 2022-01-25 | 2022-01-26 |
| CVE-2022-23437 | There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document paylo... | Not Provided | 2022-01-24 | 2022-01-24 |
| CVE-2022-23307 | CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a c... | 9.8 - CRITICAL | 2022-01-18 | 2022-01-24 |
| CVE-2022-23305 | By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inser... | 9.8 - CRITICAL | 2022-01-18 | 2022-01-27 |
| CVE-2022-23302 | JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to... | 8.8 - HIGH | 2022-01-18 | 2022-01-27 |
| CVE-2022-23223 | The HTTP response will disclose the user password. This issue affected Apache ShenYu 2.4.0 and 2.4.1. | Not Provided | 2022-01-25 | 2022-01-26 |
| CVE-2022-23181 | The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8... | Not Provided | 2022-01-27 | 2022-01-27 |
| CVE-2022-22932 | Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of e... | Not Provided | 2022-01-26 | 2022-01-26 |
| CVE-2022-22733 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an att... | 6.5 - MEDIUM | 2022-01-20 | 2022-01-26 |
| CVE-2021-43557 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.5 - HIGH | 2021-11-22 | 2021-11-26 |
| CVE-2021-43410 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 5.3 - MEDIUM | 2021-12-09 | 2021-12-14 |
| CVE-2021-43350 | An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /... | 9.8 - CRITICAL | 2021-11-11 | 2021-11-30 |
| CVE-2021-43297 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-01-10 | 2022-01-18 |
| CVE-2021-43083 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.8 - HIGH | 2021-12-19 | 2022-01-04 |
| CVE-2021-43082 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the stats-over-http plugin of Apache ... | 9.8 - CRITICAL | 2021-11-03 | 2021-11-05 |
| CVE-2021-43045 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 7.5 - HIGH | 2022-01-06 | 2022-01-14 |
| CVE-2021-42357 | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.1 - MEDIUM | 2022-01-17 | 2022-01-24 |
| CVE-2021-42340 | The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8... | 7.5 - HIGH | 2021-10-14 | 2021-12-04 |
| CVE-2021-42250 | Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge ... | 6.5 - MEDIUM | 2021-11-17 | 2021-11-18 |
Known software with vulnerabilities from Apache
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Apache | Accumulo | 1.5.0 |
| Application | Apache | Activemq | - |
| Application | Apache | Activemq Apollo | 1.0 |
| Application | Apache | Activemq Artemis | - |
| Application | Apache | Airflow | 0.1 |
| Application | Apache | Allura | 1.0.0 |
| Application | Apache | Ambari | 0.9 |
| Application | Apache | Amqp 0-x Jms Client | 6.0.3 |
| Application | Apache | Amqp Jms Client | 0.9.0 |
| Application | Apache | Ant | 1.1 |
| Application | Apache | Apache Test | - |
| Application | Apache | Apache-ssl | 1.37 |
| Application | Apache | Apisix | 1.2 |
| Application | Apache | Apr-util | 0.9.1 |
| Application | Apache | Archiva | 0.9 |
| Application | Apache | Arrow | 0.1.0 |
| Application | Apache | Asterixdb | - |
| Application | Apache | Atlas | 0.5.0 |
| Application | Apache | Axis | - |
| Application | Apache | Axis2 | - |
Popular searches for "Apache"
a·pache | əˈpaSH, | noun
apache H, | noun Paris New Oxford American Dictionary Dictionary
Apache Pilot Flight Simulator
apps.apple.com/us/app/apache-pilot-flight-simulator/id1447090541 Search in App StoreApp Store Apache Pilot Flight Simulator