Browse all 2751 CVE security advisories affecting Apache Software Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
The Apache Software Foundation develops and maintains open-source software, primarily known for the widely deployed Apache HTTP Server and foundational Java frameworks. Its extensive portfolio exposes a significant attack surface, evidenced by the 1717 recorded CVEs. Historically, vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configuration errors or input validation failures in legacy components. While the foundation enforces rigorous security review processes, the sheer volume of projects increases the likelihood of undiscovered flaws. Notable incidents include critical flaws in Log4j, which allowed remote code execution via crafted log messages, highlighting risks in dependency management. The organization relies on community-driven patching, requiring administrators to promptly apply updates to mitigate exploitation. This model ensures transparency but demands active vigilance from users to maintain system integrity against evolving threat vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2020-1947 | Apache ShardingSphere 代码问题漏洞 — Apache ShardingSphere(incubator) | 9.8 | - | 2020-03-11 |
| CVE-2015-2992 | Apache Struts 跨站脚本漏洞 — Apache Struts | 6.1 | - | 2020-02-27 |
| CVE-2020-1930 | Apache SpamAssassin 操作系统命令注入漏洞 — Apache SpamAssassin | 7.5 | - | 2020-01-30 |
| CVE-2020-1931 | Apache SpamAssassin 操作系统命令注入漏洞 — Apache SpamAssassin | 8.1 | - | 2020-01-30 |
| CVE-2020-1940 | Apache Jackrabbit Oak 信息泄露漏洞 — Apache Jackrabbit Oak | 7.5 | - | 2020-01-28 |
| CVE-2020-1932 | Apache Superset 信息泄露漏洞 — Apache Superset | 6.5 | - | 2020-01-28 |
| CVE-2020-1933 | Apache NiFi 跨站脚本漏洞 — Apache NiFi | 6.1 | - | 2020-01-28 |
| CVE-2020-1928 | Apache NiFi 日志信息泄露漏洞 — Apache NiFi | 7.5 | - | 2020-01-28 |
| CVE-2020-1925 | Apache Olingo 代码问题漏洞 — Apache Olingo | 7.5 | - | 2020-01-09 |
| CVE-2019-12418 | Apache Tomcat 安全漏洞 — Apache Tomcat | 7.0 | - | 2019-12-23 |
| CVE-2019-17563 | Apache Tomcat 授权问题漏洞 — Apache Tomcat | 7.5 | - | 2019-12-23 |
| CVE-2019-17571 | Apache Log4j 代码问题漏洞 — Log4j CWE-502 | 8.1 | - | 2019-12-20 |
| CVE-2018-1311 | Apache Xerces-C 资源管理错误漏洞 — Apache Xerces-C | 8.1 | - | 2019-12-18 |
| CVE-2019-12408 | Apache Arrow 代码问题漏洞 — Apache Arrow | - | - | 2019-11-08 |
| CVE-2019-12410 | Apache Arrow 代码问题漏洞 — Apache Arrow | 7.5 | - | 2019-11-08 |
| CVE-2019-10084 | Apache Impala 访问控制错误漏洞 — Impala | 7.5 | - | 2019-11-05 |
| CVE-2019-0231 | Apache MINA SSLFilter security Issue — Apache MINA | 7.5 | - | 2019-10-01 |
| CVE-2019-12402 | Apache Commons Compress 资源管理错误漏洞 — Apache Commons Compress | 7.5 | - | 2019-08-29 |
| CVE-2019-12397 | Apache Ranger 跨站脚本漏洞 — Apache Ranger | 6.1 | - | 2019-08-08 |
| CVE-2019-0197 | Apache HTTP Server 环境问题漏洞 — Apache HTTP Server | 5.9 | - | 2019-06-11 |
| CVE-2019-0196 | Apache HTTP Server 资源管理错误漏洞 — Apache HTTP Server | 5.3 | - | 2019-06-11 |
| CVE-2019-0220 | Apache HTTP Server 资源管理错误漏洞 — Apache HTTP Server | - | - | 2019-06-11 |
| CVE-2018-17198 | Apache Roller 代码问题漏洞 — Apache Roller | 9.8 | - | 2019-05-28 |
| CVE-2019-0201 | Apache Zookeeper 授权问题漏洞 — Apache ZooKeeper | 5.9 | - | 2019-05-23 |
| CVE-2019-10078 | Apache JSPWiki 跨站脚本漏洞 — Apache JSPWiki | 6.1 | - | 2019-05-20 |
| CVE-2019-10077 | Apache JSPWiki 跨站脚本漏洞 — Apache JSPWiki | 6.1 | - | 2019-05-20 |
| CVE-2019-10076 | Apache JSPWiki 跨站脚本漏洞 — Apache JSPWiki | 6.1 | - | 2019-05-20 |
| CVE-2019-0186 | Apache Pluto 跨站脚本漏洞 — Apache Pluto | 6.1 | - | 2019-04-26 |
| CVE-2019-0223 | Apache Qpid Proton 信任管理问题漏洞 — Apache Qpid Proton | 7.4 | - | 2019-04-23 |
| CVE-2018-1328 | Apache Zeppelin 跨站脚本漏洞 — Apache Zeppelin | 5.4 | - | 2019-04-23 |
This page lists every published CVE security advisory associated with Apache Software Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.