Browse all 2751 CVE security advisories affecting Apache Software Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
The Apache Software Foundation develops and maintains open-source software, primarily known for the widely deployed Apache HTTP Server and foundational Java frameworks. Its extensive portfolio exposes a significant attack surface, evidenced by the 1717 recorded CVEs. Historically, vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configuration errors or input validation failures in legacy components. While the foundation enforces rigorous security review processes, the sheer volume of projects increases the likelihood of undiscovered flaws. Notable incidents include critical flaws in Log4j, which allowed remote code execution via crafted log messages, highlighting risks in dependency management. The organization relies on community-driven patching, requiring administrators to promptly apply updates to mitigate exploitation. This model ensures transparency but demands active vigilance from users to maintain system integrity against evolving threat vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-1317 | Apache Zeppelin 授权问题漏洞 — Apache Zeppelin | 8.8 | - | 2019-04-23 |
| CVE-2017-12619 | Apache Zeppelin 授权问题漏洞 — Apache Zeppelin | 8.1 | - | 2019-04-23 |
| CVE-2017-3164 | Apache Solr 代码问题漏洞 — Apache Solr | 6.5 | - | 2019-03-08 |
| CVE-2019-0192 | Apache Solr 代码问题漏洞 — Apache Solr | 9.8 | - | 2019-03-07 |
| CVE-2018-11783 | Apache Traffic Server 信息泄露漏洞 — Apache Traffic Server | 6.5 | - | 2019-03-07 |
| CVE-2019-0200 | Apache Qpid 输入验证错误漏洞 — Apache Qpid Broker-J | 7.5 | - | 2019-03-06 |
| CVE-2019-0187 | Apache Jmeter 代码问题漏洞 — Apache JMeter | 9.8 | - | 2019-03-06 |
| CVE-2018-11793 | Apache Mesos 缓冲区错误漏洞 — Apache Mesos | 7.5 | - | 2019-03-05 |
| CVE-2018-20244 | Apache Airflow 跨站脚本漏洞 — Apache Airflow | 4.8 | - | 2019-02-27 |
| CVE-2018-20242 | Apache JSPWiki 跨站脚本漏洞 — Apache JSPWiki | 6.1 | - | 2019-02-11 |
| CVE-2018-1296 | Apache Hadoop 信息泄露漏洞 — Apache Hadoop | 7.5 | - | 2019-02-07 |
| CVE-2018-1340 | Apache Guacamole 信息泄露漏洞 — Apache Guacamole | 7.5 | - | 2019-02-07 |
| CVE-2018-11803 | Apache Subversion 缓冲区错误漏洞 — Apache Subversion | 7.5 | - | 2019-02-05 |
| CVE-2018-11760 | Apache Spark 访问控制错误漏洞 — Apache Spark | 5.5 | - | 2019-02-04 |
| CVE-2018-11790 | Apache OpenOffice 安全漏洞 — Apache OpenOffice | 7.8 | - | 2019-01-31 |
| CVE-2018-17189 | Apache HTTP Server 资源管理错误漏洞 — Apache HTTP Server | 7.5 | - | 2019-01-30 |
| CVE-2018-17199 | Apache HTTP Server 授权问题漏洞 — Apache HTTP Server | 7.5 | - | 2019-01-30 |
| CVE-2019-0190 | Apache HTTP Server 输入验证错误漏洞 — Apache HTTP Server | 7.5 | - | 2019-01-30 |
| CVE-2017-15720 | Apache Airflow 输入验证漏洞 — Apache Airflow | 8.8 | - | 2019-01-23 |
| CVE-2017-17835 | Apache Airflow 跨站请求伪造漏洞 — Apache Airflow | 8.8 | - | 2019-01-23 |
| CVE-2017-17836 | Apache Airflow 信任管理问题漏洞 — Apache Airflow | 9.8 | - | 2019-01-23 |
| CVE-2018-20245 | Apache Airflow 安全漏洞 — Apache Airflow | 7.5 | - | 2019-01-23 |
| CVE-2018-11798 | Apache Thrift Node.js static web服务器访问控制错误漏洞 — Apache Thrift | 6.5 | - | 2019-01-07 |
| CVE-2018-1320 | Apache Thrift 信任管理问题漏洞 — Apache Thrift | 7.5 | - | 2019-01-07 |
| CVE-2018-11788 | Apache Karaf 安全漏洞 — Apache Karaf | 9.8 | - | 2019-01-07 |
| CVE-2018-17188 | Apache CouchDB 权限许可和访问控制问题漏洞 — Apache CouchDB | 7.2 | - | 2019-01-02 |
| CVE-2018-17191 | Apache NetBeans 安全漏洞 — Apache NetBeans | 9.8 | - | 2018-12-31 |
| CVE-2018-17197 | Apache Tika SQLite3Parser 安全漏洞 — Apache Tika | 6.2 | - | 2018-12-24 |
| CVE-2018-11799 | Apache Oozie 安全漏洞 — Apache Oozie | 6.5 | - | 2018-12-19 |
| CVE-2018-17192 | Apache NiFi 输入验证错误漏洞 — Apache NiFi | 7.5 | - | 2018-12-19 |
This page lists every published CVE security advisory associated with Apache Software Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.