Apache: 41 known exploited vulnerabilities

CVE-2016-3081 – Apache Struts (added 2026-10-08)
CVE-2026-34486 – Apache Tomcat (added 2026-08-04)
CVE-2026-34197 – Apache ActiveMQ (added 2026-04-16)
CVE-2024-38475 – Apache HTTP Server (added 2025-05-01)
CVE-2025-24813 – Apache Tomcat (added 2025-04-01)
CVE-2024-45195 – Apache OFBiz (added 2025-02-04)
CVE-2024-27348 – Apache HugeGraph-Server (added 2024-09-18)
CVE-2024-38856 – Apache OFBiz (added 2024-08-27)
CVE-2024-32113 – Apache OFBiz (added 2024-08-07)
CVE-2020-17519 – Apache Flink (added 2024-05-23)
CVE-2023-27524 – Apache Superset (added 2024-01-08)
CVE-2023-46604 – Apache ActiveMQ (added 2023-11-02)
CVE-2023-33246 – Apache RocketMQ (added 2023-09-06)
CVE-2016-8735 – Apache Tomcat (added 2023-05-12)
CVE-2021-45046 – Apache Log4j2 (added 2023-05-01)
CVE-2022-33891 – Apache Spark (added 2023-03-07)
CVE-2022-24706 – Apache CouchDB (added 2022-08-25)
CVE-2022-24112 – Apache APISIX (added 2022-08-25)
CVE-2020-1956 – Apache Kylin (added 2022-03-25)
CVE-2017-12617 – Apache Tomcat (added 2022-03-25)
CVE-2017-12615 – Apache Tomcat (added 2022-03-25)
CVE-2013-2251 – Apache Struts (added 2022-03-25)
CVE-2020-1938 – Apache Tomcat (added 2022-03-03)
CVE-2017-9791 – Apache Struts 1 (added 2022-02-10)
CVE-2016-3088 – Apache ActiveMQ (added 2022-02-10)
CVE-2012-0391 – Apache Struts 2 (added 2022-01-21)
CVE-2006-1547 – Apache Struts 1 (added 2022-01-21)
CVE-2020-13927 – Apache Airflow's Experimental API (added 2022-01-18)
CVE-2020-11978 – Apache Airflow (added 2022-01-18)
CVE-2021-44228 – Apache Log4j2 (added 2021-12-10)
CVE-2019-0193 – Apache Solr (added 2021-12-10)
CVE-2021-40438 – Apache Apache (added 2021-12-01)
CVE-2021-42013 – Apache HTTP Server (added 2021-11-03)
CVE-2021-41773 – Apache HTTP Server (added 2021-11-03)
CVE-2020-17530 – Apache Struts (added 2021-11-03)
CVE-2019-17558 – Apache Solr (added 2021-11-03)
CVE-2019-0211 – Apache HTTP Server (added 2021-11-03)
CVE-2018-11776 – Apache Struts (added 2021-11-03)
CVE-2017-9805 – Apache Struts (added 2021-11-03)
CVE-2017-5638 – Apache Struts (added 2021-11-03)
CVE-2016-4437 – Apache Shiro (added 2021-11-03)

Get new KEV entries in your inbox: free n8n workflow. Free CISA KEV Patch Digest (n8n workflow) (Runbook Foundry). A Monday-morning email of KEV entries added in the previous week (Mon-Sun), with your watchlist vendors listed first.
Not affiliated with n8n GmbH or CISA. Not tested on n8n Cloud. n8n is a trademark of n8n GmbH.

Generated from the CISA feed with AI assistance; facts are taken verbatim from the feed. Not affiliated with or endorsed by CISA. Facts come from the CISA Known Exploited Vulnerabilities catalog (public domain).