Browse all 2345 CVE security advisories affecting Apache Software Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
The Apache Software Foundation develops and maintains open-source software, primarily known for the widely deployed Apache HTTP Server and foundational Java frameworks. Its extensive portfolio exposes a significant attack surface, evidenced by the 1717 recorded CVEs. Historically, vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configuration errors or input validation failures in legacy components. While the foundation enforces rigorous security review processes, the sheer volume of projects increases the likelihood of undiscovered flaws. Notable incidents include critical flaws in Log4j, which allowed remote code execution via crafted log messages, highlighting risks in dependency management. The organization relies on community-driven patching, requiring administrators to promptly apply updates to mitigate exploitation. This model ensures transparency but demands active vigilance from users to maintain system integrity against evolving threat vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-8030 | Apache Qpid Broker-J 安全漏洞 — Apache Qpid Broker-J | 7.5 | - | 2018-06-19 |
| CVE-2018-1333 | DoS for HTTP/2 connections by crafted requests — Apache HTTP Server | 7.5 | - | 2018-06-18 |
| CVE-2017-15695 | Apache Geode server 权限许可和访问控制问题漏洞 — Apache Geode | 8.8 | - | 2018-06-13 |
| CVE-2018-1281 | Apache MXNet 信息泄露漏洞 — Apache MXNet | 6.5 | - | 2018-06-08 |
| CVE-2018-1332 | Apache Storm 安全漏洞 — Apache Storm | 8.1 | - | 2018-06-05 |
| CVE-2018-8008 | Apache Storm 安全漏洞 — Apache Storm | 5.5 | - | 2018-06-05 |
| CVE-2018-8013 | Apache Batik 信息泄露漏洞 — Apache Batik | 9.8 | - | 2018-05-24 |
| CVE-2018-1309 | Apache NiFi SplitXML processor 安全漏洞 — Apache NiFi | 9.8 | - | 2018-05-23 |
| CVE-2018-1310 | Apache NiFi 安全漏洞 — Apache NiFi | 7.5 | - | 2018-05-23 |
| CVE-2018-8010 | Apache Solr 安全漏洞 — Apache Solr | 5.5 | - | 2018-05-21 |
| CVE-2018-8012 | Apache Zookeeper 访问控制错误漏洞 — Apache ZooKeeper | 7.5 | - | 2018-05-21 |
| CVE-2018-8015 | Apache ORC 缓冲区错误漏洞 — Apache ORC | 7.5 | - | 2018-05-18 |
| CVE-2018-8014 | Apache Tomcat CORS Filter 安全特征问题漏洞 — Apache Tomcat | 9.8 | - | 2018-05-16 |
| CVE-2018-1313 | Apache Derby 权限许可和访问控制问题漏洞 — Apache Derby | 7.5 | - | 2018-05-07 |
| CVE-2018-8003 | Apache Ambari 路径遍历漏洞 — Apache Ambari | 3.7 | - | 2018-05-03 |
| CVE-2017-15691 | 多款Apache产品安全漏洞 — Apache UIMA | 7.5 | - | 2018-04-26 |
| CVE-2018-1335 | Apache Tika 安全漏洞 — Apache Tika | 8.1 | - | 2018-04-25 |
| CVE-2018-1338 | Apache Tika 安全漏洞 — Apache Tika | 5.5 | - | 2018-04-25 |
| CVE-2018-1339 | Apache Tika 安全漏洞 — Apache Tika | 5.5 | - | 2018-04-25 |
| CVE-2018-1289 | Apache Fineract 安全漏洞 — Apache Fineract | 8.8 | - | 2018-04-20 |
| CVE-2018-1290 | Apache Fineract SQL注入漏洞 — Apache Fineract | 9.8 | - | 2018-04-20 |
| CVE-2018-1291 | Apache Fineract 安全漏洞 — Apache Fineract | 8.1 | - | 2018-04-20 |
| CVE-2018-1292 | Apache Fineract 安全漏洞 — Apache Fineract | 8.1 | - | 2018-04-20 |
| CVE-2018-1325 | Wicket jQuery UI 跨站脚本漏洞 — wicket-jquery-ui | 7.2 | - | 2018-04-18 |
| CVE-2018-1308 | Apache Solr DataImportHandler 安全漏洞 — Apache Solr | 7.5 | - | 2018-04-09 |
| CVE-2018-1282 | Apache Hive JDBC驱动程序SQL注入漏洞 — Apache Hive | 9.8 | - | 2018-04-05 |
| CVE-2018-1284 | Apache Hive 信息泄露漏洞 — Apache Hive | 5.3 | - | 2018-04-05 |
| CVE-2018-1315 | Apache Hive 安全特征问题漏洞 — Apache Hive | 5.3 | - | 2018-04-05 |
| CVE-2018-1295 | Apache Ignite 安全漏洞 — Apache Ignite | 9.8 | - | 2018-04-02 |
| CVE-2018-1327 | Apache Struts 2 输入验证错误漏洞 — Apache Struts | 7.5 | - | 2018-03-27 |
This page lists every published CVE security advisory associated with Apache Software Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.