Browse all 2345 CVE security advisories affecting Apache Software Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
The Apache Software Foundation develops and maintains open-source software, primarily known for the widely deployed Apache HTTP Server and foundational Java frameworks. Its extensive portfolio exposes a significant attack surface, evidenced by the 1717 recorded CVEs. Historically, vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configuration errors or input validation failures in legacy components. While the foundation enforces rigorous security review processes, the sheer volume of projects increases the likelihood of undiscovered flaws. Notable incidents include critical flaws in Log4j, which allowed remote code execution via crafted log messages, highlighting risks in dependency management. The organization relies on community-driven patching, requiring administrators to promptly apply updates to mitigate exploitation. This model ensures transparency but demands active vigilance from users to maintain system integrity against evolving threat vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2017-5637 | Apache Zookeeper 安全漏洞 — Apache ZooKeeper | 7.5 | - | 2017-10-10 |
| CVE-2017-12617 | Apache Tomcat 安全漏洞 — Apache Tomcat | 8.1 | - | 2017-10-03 |
| CVE-2017-9792 | Apache Impala(incubating) 安全漏洞 — Apache Impala | 6.5 | - | 2017-10-03 |
| CVE-2017-12620 | Apache OpenNLP 安全漏洞 — Apache OpenNLP | 9.8 | - | 2017-10-02 |
| CVE-2014-0043 | Apache Wicket 信息泄露漏洞 — Apache Wicket | 5.3 | - | 2017-10-02 |
| CVE-2016-6806 | Apache Wicket 跨站请求伪造漏洞 — Apache Wicket | 8.8 | - | 2017-10-02 |
| CVE-2017-9797 | Apache Geode cluster 安全漏洞 — Apache Geode | 6.5 | - | 2017-10-02 |
| CVE-2017-9794 | Apache Geode 信息泄露漏洞 — Apache Geode | 4.3 | - | 2017-09-29 |
| CVE-2017-7687 | Apache Mesos 安全漏洞 — Apache Mesos | 7.5 | - | 2017-09-28 |
| CVE-2017-9790 | Apache Mesos 安全漏洞 — Apache Mesos | 7.5 | - | 2017-09-28 |
| CVE-2017-12621 | Apache Commons Jelly 安全漏洞 — Apache Commons Jelly | 9.8 | - | 2017-09-27 |
| CVE-2016-6795 | Apache Struts 路径遍历漏洞 — Apache Struts | 9.8 | - | 2017-09-20 |
| CVE-2016-8738 | Apache Struts 2 安全漏洞 — Apache Struts | 5.9 | - | 2017-09-20 |
| CVE-2017-12611 | Apache Struts 输入验证错误漏洞 — Apache Struts | 9.8 | - | 2017-09-20 |
| CVE-2017-9793 | Apache Struts 输入验证错误漏洞 — Apache Struts | 7.5 | - | 2017-09-20 |
| CVE-2017-9804 | Apache Struts 2 安全漏洞 — Apache Struts | 5.9 | - | 2017-09-20 |
| CVE-2017-12615 | Apache Tomcat 安全漏洞 — Apache Tomcat | 8.1 | - | 2017-09-19 |
| CVE-2017-12616 | Apache Tomcat 安全漏洞 — Apache Tomcat | 5.9 | - | 2017-09-19 |
| CVE-2017-9803 | Apache Solr 授权问题漏洞 — Apache Solr | 8.8 | - | 2017-09-18 |
| CVE-2017-9798 | Apache HTTP Server 资源管理错误漏洞 — Apache HTTP Server | 7.5 | - | 2017-09-18 |
| CVE-2017-9805 | Apache Struts 代码问题漏洞 — Apache Struts | 8.1 | - | 2017-09-15 |
| CVE-2016-8737 | Apache Brooklyn REST服务器跨站请求伪造漏洞 — Apache Brooklyn | 8.8 | - | 2017-09-13 |
| CVE-2016-8744 | Apache Brooklyn 安全漏洞 — Apache Brooklyn | 8.8 | - | 2017-09-13 |
| CVE-2017-3165 | Apache Brooklyn REST服务器跨站脚本漏洞 — Apache Brooklyn | 5.4 | - | 2017-09-13 |
| CVE-2016-3086 | Apache Hadoop 信息泄露漏洞 — Apache Hadoop | 9.8 | - | 2017-09-05 |
| CVE-2016-5001 | Apache Hadoop 信息泄露漏洞 — Apache Hadoop | 5.5 | - | 2017-08-30 |
| CVE-2016-4462 | Apache OFBiz 安全漏洞 — Apache OFBiz | 8.8 | - | 2017-08-30 |
| CVE-2016-6800 | Apache OFBiz 跨站脚本漏洞 — Apache OFBiz | 6.1 | - | 2017-08-30 |
| CVE-2017-3163 | Apache Solr 安全漏洞 — Apache Solr | 7.5 | - | 2017-08-30 |
| CVE-2016-8752 | Apache Atlas 信息泄露漏洞 — Apache Atlas | 5.3 | - | 2017-08-29 |
This page lists every published CVE security advisory associated with Apache Software Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.