Browse all 2345 CVE security advisories affecting Apache Software Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
The Apache Software Foundation develops and maintains open-source software, primarily known for the widely deployed Apache HTTP Server and foundational Java frameworks. Its extensive portfolio exposes a significant attack surface, evidenced by the 1717 recorded CVEs. Historically, vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configuration errors or input validation failures in legacy components. While the foundation enforces rigorous security review processes, the sheer volume of projects increases the likelihood of undiscovered flaws. Notable incidents include critical flaws in Log4j, which allowed remote code execution via crafted log messages, highlighting risks in dependency management. The organization relies on community-driven patching, requiring administrators to promptly apply updates to mitigate exploitation. This model ensures transparency but demands active vigilance from users to maintain system integrity against evolving threat vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-11769 | CouchDB 安全漏洞 — Apache CouchDB | 7.2 | - | 2018-08-08 |
| CVE-2017-12614 | Apache Airflow 跨站脚本漏洞 — Apache Airflow | 6.1 | - | 2018-08-06 |
| CVE-2018-1336 | Apache Tomcat 资源管理错误漏洞 — Apache Tomcat | 7.5 | - | 2018-08-02 |
| CVE-2018-8037 | Apache Tomcat 竞争条件问题漏洞 — Apache Tomcat | 5.9 | - | 2018-08-02 |
| CVE-2018-8032 | Apache Axis 跨站脚本漏洞 — Apache Axis | 6.1 | - | 2018-08-02 |
| CVE-2018-8034 | Apache Tomcat 信任管理问题漏洞 — Apache Tomcat | 9.1 | - | 2018-08-01 |
| CVE-2016-8648 | Red Hat JBoss Fuse和JBoss A-MQ 安全漏洞 — Karaf CWE-502 | 7.2 | - | 2018-08-01 |
| CVE-2018-8019 | Apache Tomcat Native 安全漏洞 — Apache Tomcat Native | 7.4 | - | 2018-07-31 |
| CVE-2018-8020 | Apache Tomcat Native 信任管理问题漏洞 — Apache Tomcat Native | 7.4 | - | 2018-07-31 |
| CVE-2018-8027 | Apache Camel Core XSD validation processor 安全漏洞 — Apache Camel | 9.8 | - | 2018-07-31 |
| CVE-2017-12610 | Apache Kafka 授权问题漏洞 — Apache Kafka | 6.8 | - | 2018-07-26 |
| CVE-2018-1288 | Apache Kafka 信息泄露漏洞 — Apache Kafka | 5.4 | - | 2018-07-26 |
| CVE-2018-8031 | Apache TomEE console 跨站脚本漏洞 — Apache TomEE | 6.1 | - | 2018-07-23 |
| CVE-2018-11756 | PHP Runtime for Apache OpenWhisk 权限许可和访问控制问题漏洞 — PHP Runtime for Apache OpenWhisk | 9.8 | - | 2018-07-23 |
| CVE-2018-11757 | Docker Skeleton Runtime for Apache OpenWhisk 权限许可和访问控制问题漏洞 — Docker Skeleton Runtime for Apache OpenWhisk | 9.8 | - | 2018-07-23 |
| CVE-2018-8018 | Apache Ignite 安全漏洞 — Apache Ignite | 9.8 | - | 2018-07-19 |
| CVE-2018-8042 | Apache Ambari 信息泄露漏洞 — Apache Ambari | 8.1 | - | 2018-07-18 |
| CVE-2018-8011 | mod_md, DoS via Coredumps on specially crafted requests — Apache HTTP Server | 7.5 | - | 2018-07-18 |
| CVE-2018-1334 | Apache Spark 安全漏洞 — Apache Spark | 6.3 | - | 2018-07-12 |
| CVE-2018-8024 | Apache Spark 信息泄露漏洞 — Apache Spark | 5.4 | - | 2018-07-12 |
| CVE-2018-8007 | CouchDB 安全漏洞 — Apache CouchDB | 7.2 | - | 2018-07-11 |
| CVE-2018-1331 | Apache Storm 安全漏洞 — Apache Storm | 6.8 | - | 2018-07-10 |
| CVE-2018-1337 | Apache LDAP API 信息泄露漏洞 — Apache Directory | 9.8 | - | 2018-07-10 |
| CVE-2018-8026 | Apache Solr 安全漏洞 — Apache Solr | 6.5 | - | 2018-07-05 |
| CVE-2018-8038 | Apache CXF Fediz 安全漏洞 — Apache CXF Fediz | 7.5 | - | 2018-07-05 |
| CVE-2018-8036 | Apache PDFBox 资源管理错误漏洞 — Apache PDFBox | 5.5 | - | 2018-07-03 |
| CVE-2018-8039 | Apache CXF 安全特征问题漏洞 — Apache CXF | 8.1 | - | 2018-07-02 |
| CVE-2018-8016 | Apache Cassandra 安全漏洞 — Apache Cassandra | 9.8 | - | 2018-06-28 |
| CVE-2018-1306 | Apache Pluto 信息泄露漏洞 — Apache Pluto | 7.5 | - | 2018-06-27 |
| CVE-2018-8025 | Apache HBase 安全漏洞 — Apache HBase | 8.1 | - | 2018-06-27 |
This page lists every published CVE security advisory associated with Apache Software Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.