Browse all 2751 CVE security advisories affecting Apache Software Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
The Apache Software Foundation develops and maintains open-source software, primarily known for the widely deployed Apache HTTP Server and foundational Java frameworks. Its extensive portfolio exposes a significant attack surface, evidenced by the 1717 recorded CVEs. Historically, vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configuration errors or input validation failures in legacy components. While the foundation enforces rigorous security review processes, the sheer volume of projects increases the likelihood of undiscovered flaws. Notable incidents include critical flaws in Log4j, which allowed remote code execution via crafted log messages, highlighting risks in dependency management. The organization relies on community-driven patching, requiring administrators to promptly apply updates to mitigate exploitation. This model ensures transparency but demands active vigilance from users to maintain system integrity against evolving threat vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-1316 | Apache ODE 安全漏洞 — Apache ODE | 7.5 | - | 2018-03-05 |
| CVE-2017-12627 | Apache Xerces-C XML Parser库安全漏洞 — Apache Xerces C++ | 9.1 | - | 2018-03-01 |
| CVE-2018-1304 | Apache Tomcat 安全特征问题漏洞 — Apache Tomcat | 8.2 | - | 2018-02-28 |
| CVE-2018-1286 | Apache OpenMeetings 安全漏洞 — Apache OpenMeetings | 6.5 | - | 2018-02-28 |
| CVE-2017-5660 | Apache Traffic Server 安全漏洞 — Apache Traffic Server | 7.5 | - | 2018-02-27 |
| CVE-2017-7671 | Apache Traffic Server 安全漏洞 — Apache Traffic Server | 7.5 | - | 2018-02-27 |
| CVE-2012-3536 | Hupa 跨站脚本漏洞 — Apache Hupa | 6.1 | - | 2018-02-27 |
| CVE-2017-15692 | Apache Geode 安全漏洞 — Apache Geode | 9.8 | - | 2018-02-27 |
| CVE-2017-15693 | Apache Geode 安全漏洞 — Apache Geode | 7.5 | - | 2018-02-27 |
| CVE-2017-15696 | Apache Geode cluster 安全漏洞 — Apache Geode | 7.5 | - | 2018-02-26 |
| CVE-2018-1305 | Apache Tomcat 访问控制错误漏洞 — Apache Tomcat | 6.5 | - | 2018-02-23 |
| CVE-2009-4267 | Apache jUDDI 安全漏洞 — jUDDI | 6.5 | - | 2018-02-19 |
| CVE-2016-8750 | Apache Karaf 安全漏洞 — Apache Karaf | 6.5 | - | 2018-02-19 |
| CVE-2017-15712 | Apache Oozie 安全漏洞 — Apache Oozie | 6.5 | - | 2018-02-19 |
| CVE-2018-1287 | Apache JMeter 安全漏洞 — Apache JMeter | 9.8 | - | 2018-02-14 |
| CVE-2017-15699 | Apache Qpid Dispatch Router 输入验证错误漏洞 — Apache Qpid Dispatch Router | 6.5 | - | 2018-02-13 |
| CVE-2017-15709 | ActiveMQ 信息泄露漏洞 — Apache ActiveMQ | 5.9 | - | 2018-02-13 |
| CVE-2018-1297 | Apache JMeter 安全漏洞 — Apache JMeter | 9.8 | - | 2018-02-13 |
| CVE-2016-5397 | Apache Thrift Go client库安全漏洞 — Apache Thrift | 9.8 | - | 2018-02-12 |
| CVE-2016-8742 | Apache CouchDB for Windows Windows installer 权限许可和访问控制漏洞 — Apache CouchDB | 7.8 | - | 2018-02-12 |
| CVE-2018-1307 | Apache jUDDI 安全漏洞 — Apache jUDDI | 8.1 | - | 2018-02-09 |
| CVE-2018-1298 | Apache Qpid 安全漏洞 — Apache Qpid Broker-J | 5.9 | - | 2018-02-09 |
| CVE-2018-1299 | Apache Allura 安全漏洞 — Apache Allura | 7.5 | - | 2018-02-06 |
| CVE-2013-4317 | Apache CloudStack 安全漏洞 — Apache CloudStack | 6.5 | - | 2018-02-06 |
| CVE-2016-6813 | Apache CloudStack 安全漏洞 — Apache CloudStack | 9.8 | - | 2018-02-06 |
| CVE-2017-3160 | Apache Cordova For Android 安全漏洞 — Apache Cordova Android | 7.4 | - | 2018-02-01 |
| CVE-2017-15698 | Apache Tomcat Native Connector 安全漏洞 — Apache Tomcat Native | 5.9 | - | 2018-01-31 |
| CVE-2017-15706 | Apache Tomcat 安全漏洞 — Apache Tomcat | 8.2 | - | 2018-01-31 |
| CVE-2017-12626 | Apache POI 资源管理错误漏洞 — Apache POI | 7.5 | - | 2018-01-29 |
| CVE-2017-15703 | Apache NiFi 安全漏洞 — Apache NiFi | 7.3 | - | 2018-01-25 |
This page lists every published CVE security advisory associated with Apache Software Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.