Browse all 2751 CVE security advisories affecting Apache Software Foundation. AI-powered Chinese analysis, POCs, and references for each vulnerability.
The Apache Software Foundation develops and maintains open-source software, primarily known for the widely deployed Apache HTTP Server and foundational Java frameworks. Its extensive portfolio exposes a significant attack surface, evidenced by the 1717 recorded CVEs. Historically, vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from complex configuration errors or input validation failures in legacy components. While the foundation enforces rigorous security review processes, the sheer volume of projects increases the likelihood of undiscovered flaws. Notable incidents include critical flaws in Log4j, which allowed remote code execution via crafted log messages, highlighting risks in dependency management. The organization relies on community-driven patching, requiring administrators to promptly apply updates to mitigate exploitation. This model ensures transparency but demands active vigilance from users to maintain system integrity against evolving threat vectors.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2017-7670 | Apache Traffic Control 安全漏洞 — Apache Traffic Control | 7.5 | - | 2017-07-10 |
| CVE-2017-9791 | Apache Struts 输入验证错误漏洞 — Apache Struts | 9.8 | - | 2017-07-10 |
| CVE-2017-7660 | Apache Solr 安全漏洞 — Apache Solr | - | - | 2017-07-07 |
| CVE-2017-7686 | Apache Ignite 信息泄露漏洞 — Apache Ignite | 7.5 | - | 2017-06-28 |
| CVE-2017-3167 | Apache httpd 安全漏洞 — Apache HTTP Server CWE-287 | 9.8 | - | 2017-06-20 |
| CVE-2017-3169 | Apache httpd 安全漏洞 — Apache HTTP Server CWE-476 | 9.1 | - | 2017-06-20 |
| CVE-2017-7668 | Apache httpd 安全漏洞 — Apache HTTP Server CWE-126 | 9.1 | - | 2017-06-20 |
| CVE-2017-7679 | Apache httpd 安全漏洞 — Apache HTTP Server CWE-126 | 9.8 | - | 2017-06-20 |
| CVE-2016-8746 | Apache Ranger 安全漏洞 — Apache Ranger | 5.9 | - | 2017-06-14 |
| CVE-2016-8751 | Apache Ranger 跨站脚本漏洞 — Apache Ranger | 4.8 | - | 2017-06-14 |
| CVE-2017-7676 | Apache Ranger Policy resource matcher 输入验证漏洞 — Apache Ranger | 9.1 | - | 2017-06-14 |
| CVE-2017-7677 | Apache Ranger Hive Authorizer 安全漏洞 — Apache Ranger | 7.5 | - | 2017-06-14 |
| CVE-2017-7665 | Apache NiFi 安全漏洞 — Apache NiFi | 6.1 | - | 2017-06-12 |
| CVE-2017-7667 | Apache NiFi 安全漏洞 — Apache NiFi | 7.5 | - | 2017-06-12 |
| CVE-2017-5664 | Apache Tomcat Default Servlet 安全漏洞 — Apache Tomcat | 9.1 | - | 2017-06-06 |
| CVE-2017-7669 | Apache Hadoop 安全漏洞 — Apache Hadoop | 7.5 | - | 2017-06-02 |
| CVE-2016-3083 | Apache Hive 安全漏洞 — Apache Hive | - | - | 2017-05-30 |
| CVE-2017-5646 | Apache Knox 安全漏洞 — Apache Knox | 6.8 | - | 2017-05-26 |
| CVE-2017-5657 | Apache Archiva 跨站请求伪造漏洞 — Apache Archiva | 8.8 | - | 2017-05-22 |
| CVE-2015-5241 | Apache jUDDI 安全漏洞 — Apache jUDDI | 5.4 | - | 2017-05-19 |
| CVE-2017-7661 | Apache CXF Fediz 安全漏洞 — Apache CXF Fediz | 8.8 | - | 2017-05-16 |
| CVE-2017-7662 | Apache CXF Fediz 安全漏洞 — Apache CXF Fediz | 8.8 | - | 2017-05-16 |
| CVE-2016-8741 | Apache Qpid Broker for Java 安全漏洞 — Apache Qpid Broker-J | 7.5 | - | 2017-05-15 |
| CVE-2017-5655 | Apache Ambari 安全漏洞 — Apache Ambari | 7.5 | - | 2017-05-15 |
| CVE-2017-5654 | Apache Ambari 安全漏洞 — Apache Ambari | 7.5 | - | 2017-05-12 |
| CVE-2016-6799 | Apache Cordova Android 安全漏洞 — Apache Cordova Android | 6.2 | - | 2017-05-09 |
| CVE-2017-3161 | Apache Hadoop 跨站脚本漏洞 — Apache Hadoop | 6.1 | - | 2017-04-26 |
| CVE-2017-3162 | Apache Hadoop 输入验证错误漏洞 — Apache Hadoop | 7.3 | - | 2017-04-26 |
| CVE-2017-5653 | Apache CXF JAX-RS XML Security streaming客户端安全漏洞 — Apache CXF | 7.5 | - | 2017-04-18 |
| CVE-2017-5656 | Apache CXF 安全漏洞 — Apache CXF | 7.5 | - | 2017-04-18 |
This page lists every published CVE security advisory associated with Apache Software Foundation. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.