Exploit Reality — KEV: Apache

Exploit Reality — KEV: Apachehttps://xploitwatch.com/feed/hersteller/apache.xml2026-08-04T00:00:00ZExploit RealityCVE-2026-34486 — Tomcathttps://xploitwatch.com/cve/CVE-2026-344862026-08-04T00:00:00Z

Apache Tomcat Missing Encryption of Sensitive Data Vulnerability

CVE-2026-34197 — ActiveMQhttps://xploitwatch.com/cve/CVE-2026-341972026-04-16T00:00:00Z

Apache ActiveMQ Improper Input Validation Vulnerability

CVE-2024-38475 — HTTP Serverhttps://xploitwatch.com/cve/CVE-2024-384752025-05-01T00:00:00Z

Apache HTTP Server Improper Escaping of Output Vulnerability

CVE-2025-24813 — Tomcathttps://xploitwatch.com/cve/CVE-2025-248132025-04-01T00:00:00Z

Apache Tomcat Path Equivalence Vulnerability

CVE-2024-45195 — OFBizhttps://xploitwatch.com/cve/CVE-2024-451952025-02-04T00:00:00Z

Apache OFBiz Forced Browsing Vulnerability

CVE-2024-27348 — HugeGraph-Serverhttps://xploitwatch.com/cve/CVE-2024-273482024-09-18T00:00:00Z

Apache HugeGraph-Server Improper Access Control Vulnerability

CVE-2024-38856 — OFBizhttps://xploitwatch.com/cve/CVE-2024-388562024-08-27T00:00:00Z

Apache OFBiz Incorrect Authorization Vulnerability

CVE-2024-32113 — OFBizhttps://xploitwatch.com/cve/CVE-2024-321132024-08-07T00:00:00Z

Apache OFBiz Path Traversal Vulnerability

CVE-2020-17519 — Flinkhttps://xploitwatch.com/cve/CVE-2020-175192024-05-23T00:00:00Z

Apache Flink Improper Access Control Vulnerability

CVE-2023-27524 — Supersethttps://xploitwatch.com/cve/CVE-2023-275242024-01-08T00:00:00Z

Apache Superset Insecure Default Initialization of Resource Vulnerability

CVE-2023-46604 — ActiveMQhttps://xploitwatch.com/cve/CVE-2023-466042023-11-02T00:00:00Z

Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

CVE-2023-33246 — RocketMQhttps://xploitwatch.com/cve/CVE-2023-332462023-09-06T00:00:00Z

Apache RocketMQ Command Execution Vulnerability

CVE-2016-8735 — Tomcathttps://xploitwatch.com/cve/CVE-2016-87352023-05-12T00:00:00Z

Apache Tomcat Remote Code Execution Vulnerability

CVE-2021-45046 — Log4j2https://xploitwatch.com/cve/CVE-2021-450462023-05-01T00:00:00Z

Apache Log4j2 Deserialization of Untrusted Data Vulnerability

CVE-2022-33891 — Sparkhttps://xploitwatch.com/cve/CVE-2022-338912023-03-07T00:00:00Z

Apache Spark Command Injection Vulnerability

CVE-2022-24706 — CouchDBhttps://xploitwatch.com/cve/CVE-2022-247062022-08-25T00:00:00Z

Apache CouchDB Insecure Default Initialization of Resource Vulnerability

CVE-2022-24112 — APISIXhttps://xploitwatch.com/cve/CVE-2022-241122022-08-25T00:00:00Z

Apache APISIX Authentication Bypass Vulnerability

CVE-2020-1956 — Kylinhttps://xploitwatch.com/cve/CVE-2020-19562022-03-25T00:00:00Z

Apache Kylin OS Command Injection Vulnerability

CVE-2017-12617 — Tomcathttps://xploitwatch.com/cve/CVE-2017-126172022-03-25T00:00:00Z

Apache Tomcat Remote Code Execution Vulnerability

CVE-2017-12615 — Tomcathttps://xploitwatch.com/cve/CVE-2017-126152022-03-25T00:00:00Z

Apache Tomcat on Windows Remote Code Execution Vulnerability

CVE-2013-2251 — Strutshttps://xploitwatch.com/cve/CVE-2013-22512022-03-25T00:00:00Z

Apache Struts Improper Input Validation Vulnerability

CVE-2020-1938 — Tomcathttps://xploitwatch.com/cve/CVE-2020-19382022-03-03T00:00:00Z

Apache Tomcat Improper Privilege Management Vulnerability

CVE-2017-9791 — Struts 1https://xploitwatch.com/cve/CVE-2017-97912022-02-10T00:00:00Z

Apache Struts 1 Improper Input Validation Vulnerability

CVE-2016-3088 — ActiveMQhttps://xploitwatch.com/cve/CVE-2016-30882022-02-10T00:00:00Z

Apache ActiveMQ Improper Input Validation Vulnerability

CVE-2012-0391 — Struts 2https://xploitwatch.com/cve/CVE-2012-03912022-01-21T00:00:00Z

Apache Struts 2 Improper Input Validation Vulnerability

CVE-2006-1547 — Struts 1https://xploitwatch.com/cve/CVE-2006-15472022-01-21T00:00:00Z

Apache Struts 1 ActionForm Denial-of-Service Vulnerability

CVE-2020-13927 — Airflow's Experimental APIhttps://xploitwatch.com/cve/CVE-2020-139272022-01-18T00:00:00Z

Apache Airflow's Experimental API Authentication Bypass

CVE-2020-11978 — Airflowhttps://xploitwatch.com/cve/CVE-2020-119782022-01-18T00:00:00Z

Apache Airflow Command Injection

CVE-2021-44228 — Log4j2https://xploitwatch.com/cve/CVE-2021-442282021-12-10T00:00:00Z

Apache Log4j2 Remote Code Execution Vulnerability

CVE-2019-0193 — Solrhttps://xploitwatch.com/cve/CVE-2019-01932021-12-10T00:00:00Z

Apache Solr DataImportHandler Code Injection Vulnerability

CVE-2021-40438 — Apachehttps://xploitwatch.com/cve/CVE-2021-404382021-12-01T00:00:00Z

Apache HTTP Server-Side Request Forgery (SSRF)

CVE-2021-42013 — HTTP Serverhttps://xploitwatch.com/cve/CVE-2021-420132021-11-03T00:00:00Z

Apache HTTP Server Path Traversal Vulnerability

CVE-2021-41773 — HTTP Serverhttps://xploitwatch.com/cve/CVE-2021-417732021-11-03T00:00:00Z

Apache HTTP Server Path Traversal Vulnerability

CVE-2020-17530 — Strutshttps://xploitwatch.com/cve/CVE-2020-175302021-11-03T00:00:00Z

Apache Struts Remote Code Execution Vulnerability

CVE-2019-17558 — Solrhttps://xploitwatch.com/cve/CVE-2019-175582021-11-03T00:00:00Z

Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability

CVE-2019-0211 — HTTP Serverhttps://xploitwatch.com/cve/CVE-2019-02112021-11-03T00:00:00Z

Apache HTTP Server Privilege Escalation Vulnerability

CVE-2018-11776 — Strutshttps://xploitwatch.com/cve/CVE-2018-117762021-11-03T00:00:00Z

Apache Struts Remote Code Execution Vulnerability

CVE-2017-9805 — Strutshttps://xploitwatch.com/cve/CVE-2017-98052021-11-03T00:00:00Z

Apache Struts Deserialization of Untrusted Data Vulnerability

CVE-2017-5638 — Strutshttps://xploitwatch.com/cve/CVE-2017-56382021-11-03T00:00:00Z

Apache Struts Remote Code Execution Vulnerability

CVE-2016-4437 — Shirohttps://xploitwatch.com/cve/CVE-2016-44372021-11-03T00:00:00Z

Apache Shiro Code Execution Vulnerability