apache Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

HTTP Server21 vulnerabilities
OFBiz21 vulnerabilities
Struts18 vulnerabilities
inlong17 vulnerabilities
Tomcat16 vulnerabilities
airflow15 vulnerabilities
Solr10 vulnerabilities
traffic_server8 vulnerabilities
ActiveMQ7 vulnerabilities
linkis7 vulnerabilities
cloudstack6 vulnerabilities
cxf6 vulnerabilities
dolphinscheduler6 vulnerabilities
hertzbeat6 vulnerabilities
http_server6 vulnerabilities
pulsar6 vulnerabilities
streampark6 vulnerabilities
zeppelin6 vulnerabilities
Apache HTTP Server5 vulnerabilities
Apache Tomcat5 vulnerabilities
kafka5 vulnerabilities
ambari4 vulnerabilities
Apache OFBiz4 vulnerabilities
Apache Tika4 vulnerabilities
camel4 vulnerabilities

apache vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2019-0235HIGH	Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover) Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks. CWE-352Apr 30, 2020	CVSS8.8v3.1	EPSS32.7%	PoCs1	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2019-12425HIGH	Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host CWE-74Apr 30, 2020	CVSS7.5v3.1	EPSS4.67%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2020-1943MEDIUM	Apache OFBiz Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07. CWE-79Apr 1, 20201 related artifact	CVSS6.1v3.1	EPSS97.3%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template	STIX
CVE-2019-12426MEDIUM	an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06 Feb 6, 2020	CVSS5.3v3.1	EPSS4.89%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX