Browse all 2751 CVE security advisories affecting Apache Software Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
The Apache Software Foundation develops and maintains open-source software, primarily known for the widely deployed Apache HTTP Server and foundational Java frameworks. Its extensive portfolio exposes a significant attack surface, evidenced by the 1717 recorded CVEs. Historically, vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configuration errors or input validation failures in legacy components. While the foundation enforces rigorous security review processes, the sheer volume of projects increases the likelihood of undiscovered flaws. Notable incidents include critical flaws in Log4j, which allowed remote code execution via crafted log messages, highlighting risks in dependency management. The organization relies on community-driven patching, requiring administrators to promptly apply updates to mitigate exploitation. This model ensures transparency but demands active vigilance from users to maintain system integrity against evolving threat vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-17193 | Apache NiFi 跨站脚本漏洞 — Apache NiFi | 6.1 | - | 2018-12-19 |
| CVE-2018-17194 | Apache NiFi 安全漏洞 — Apache NiFi | 7.5 | - | 2018-12-19 |
| CVE-2018-17195 | Apache NiFi template upload API 跨站请求伪造漏洞 — Apache NiFi | 7.5 | - | 2018-12-19 |
| CVE-2018-8033 | Apache OFBiz 安全漏洞 — Apache OFBiz | 7.5 | - | 2018-12-13 |
| CVE-2018-11766 | Apache Hadoop 权限许可和访问控制问题漏洞 — Apache Hadoop | 8.8 | - | 2018-11-27 |
| CVE-2018-17190 | Apache Spark 授权问题漏洞 — Apache Spark | 9.8 | - | 2018-11-19 |
| CVE-2018-8009 | Apache Hadoop 路径遍历漏洞 — Apache Hadoop | 9.8 | - | 2018-11-13 |
| CVE-2018-17187 | Apache Qpid Proton-J 安全漏洞 — Apache Qpid Proton-J | 7.4 | - | 2018-11-13 |
| CVE-2018-11777 | Apache Hive HiveServer2 安全漏洞 — Apache Hive | 8.3 | - | 2018-11-08 |
| CVE-2018-1314 | Apache Hive 安全漏洞 — Apache Hive | 4.3 | - | 2018-11-08 |
| CVE-2018-17186 | Apache Syncope 安全漏洞 — Apache Syncope | 7.2 | - | 2018-11-06 |
| CVE-2018-17184 | Apache Syncope 跨站脚本漏洞 — Apache Syncope | 5.4 | - | 2018-11-06 |
| CVE-2018-11759 | Apache Tomcat JK (mod_jk) Connector 路径遍历漏洞 — Apache Tomcat Connectors | 7.5 | - | 2018-10-31 |
| CVE-2018-11785 | Apache Impala 安全漏洞 — Apache Impala | 6.5 | - | 2018-10-24 |
| CVE-2018-11792 | Apache Impala 权限许可和访问控制问题漏洞 — Apache Impala | 9.8 | - | 2018-10-24 |
| CVE-2018-11804 | Apache Spark 输入验证错误漏洞 — Apache Spark | 7.5 | - | 2018-10-24 |
| CVE-2018-8006 | Apache ActiveMQ 跨站脚本漏洞 — Apache ActiveMQ | 6.1 | - | 2018-10-10 |
| CVE-2018-11796 | Apache Tika 安全漏洞 — Apache Tika | 7.5 | - | 2018-10-09 |
| CVE-2018-11797 | Apache PDFBox 输入验证错误漏洞 — Apache PDFBox | 5.5 | - | 2018-10-05 |
| CVE-2018-11778 | Apache Ranger 缓冲区错误漏洞 — Apache Ranger | 8.8 | - | 2018-10-05 |
| CVE-2017-5658 | Apache Pony Mail 安全漏洞 — Apache Pony Mail | 5.3 | - | 2018-10-04 |
| CVE-2018-11784 | Apache Tomcat 输入验证错误漏洞 — Apache Tomcat | 4.3 | - | 2018-10-04 |
| CVE-2018-11763 | Apache HTTP Server 输入验证错误漏洞 — Apache HTTP Server | 5.9 | - | 2018-09-25 |
| CVE-2018-8023 | Apache Mesos 安全漏洞 — Apache Mesos | 5.9 | - | 2018-09-21 |
| CVE-2018-11761 | Apache Tika 安全漏洞 — Apache Tika | 7.5 | - | 2018-09-19 |
| CVE-2018-11762 | Apache Tika 安全漏洞 — Apache Tika | 5.9 | - | 2018-09-19 |
| CVE-2018-8017 | Apache Tika IptcAnpaParser 安全漏洞 — Apache Tika | 6.5 | - | 2018-09-19 |
| CVE-2018-11786 | Apache Karaf 安全漏洞 — Apache Karaf | 8.1 | - | 2018-09-18 |
| CVE-2018-11787 | Apache Karaf 授权问题漏洞 — Apache Karaf | 9.1 | - | 2018-09-18 |
| CVE-2017-15705 | Apache SpamAssassin 安全漏洞 — Apache SpamAssassin | 5.3 | - | 2018-09-17 |
This page lists every published CVE security advisory associated with Apache Software Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.