en
The Apache Software Foundation, commonly called Apache, is a U.S. 501(c)(3) nonprofit that stewards open-source software for the public good. It supports hundreds of globally distributed project communities through community-led, volunteer-driven governance and shared organizational infrastructure.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2024-42362GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/importCVE-2024-42361GHSL-2023-256: HertzBeat Authenticated (guest role) SQL injection in /api/monitor/{monitorId}/metric/{metricFull}CVE-2020-11996CVE-2020-11996CVE-2020-9488CVE-2020-9488CVE-2020-1954CVE-2020-1954| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2024-42362GHSL-2023-255: HertzBeat Authenticated (user role) RCE via unsafe deserialization in /api/monitors/import | Exploitation statusActively exploited | FixYes |
| Affected productHertzBeat |
| Published08/20/2024 |
| SeverityHigh |
CVE-2024-42361GHSL-2023-256: HertzBeat Authenticated (guest role) SQL injection in /api/monitor/{monitorId}/metric/{metricFull} | Exploitation statusActively exploited | FixNo | Affected productHertzBeat | Published08/20/2024 | SeverityHigh |
|---|
CVE-2020-11996CVE-2020-11996 | Exploitation statusNot exploited | FixNo | Affected productApache Tomcat | Published06/26/2020 | SeverityUnknown |
|---|
CVE-2020-9488CVE-2020-9488 | Exploitation statusNot exploited | FixYes | Affected productApache Log4j | Published04/27/2020 | SeverityLow |
|---|
CVE-2020-1954CVE-2020-1954 | Exploitation statusNot confirmed | FixNo | Affected productApache CXF | Published04/01/2020 | SeverityUnknown |
|---|
CVE-2020-1934CVE-2020-1934 | Exploitation statusNot confirmed | FixNo | Affected productApache HTTP Server | Published04/01/2020 | SeverityUnknown |
|---|
CVE-2020-1927CVE-2020-1927 | Exploitation statusNot confirmed | FixNo | Affected productApache HTTP Server | Published04/01/2020 | SeverityUnknown |
|---|
CVE-2020-1953CVE-2020-1953 | Exploitation statusNot confirmed | FixNo | Affected productApache Commons Configuration | Published03/13/2020 | SeverityUnknown |
|---|
CVE-2011-2487CVE-2011-2487 | Exploitation statusNot confirmed | FixNo | Affected productWSS4J | Published03/11/2020 | SeverityUnknown |
|---|
CVE-2020-1938CVE-2020-1938 | Exploitation statusKEV | FixNo | Affected productApache Tomcat | Published02/24/2020 | SeverityCritical |
|---|
CVE-2020-1935CVE-2020-1935 | Exploitation statusNot exploited | FixNo | Affected productApache Tomcat | Published02/24/2020 | SeverityUnknown |
|---|
CVE-2019-17569CVE-2019-17569 | Exploitation statusNot confirmed | FixNo | Affected productApache Tomcat | Published02/24/2020 | SeverityUnknown |
|---|
CVE-2019-17573CVE-2019-17573 | Exploitation statusNot confirmed | FixNo | Affected productCXF | Published01/16/2020 | SeverityUnknown |
|---|
CVE-2019-12423CVE-2019-12423 | Exploitation statusNot confirmed | FixNo | Affected productCXF | Published01/16/2020 | SeverityUnknown |
|---|
CVE-2019-12419CVE-2019-12419 | Exploitation statusNot confirmed | FixNo | Affected productApache CXF | Published11/06/2019 | SeverityUnknown |
|---|
CVE-2019-10086CVE-2019-10086 | Exploitation statusNot exploited | FixNo | Affected productApache Commons Beanutils | Published08/20/2019 | SeverityUnknown |
|---|
CVE-2019-0221CVE-2019-0221 | Exploitation statusNot confirmed | FixNo | Affected productApache Tomcat | Published05/28/2019 | SeverityUnknown |
|---|
CVE-2019-0227CVE-2019-0227 | Exploitation statusNot confirmed | FixNo | Affected productApache Axis 1.4 | Published05/01/2019 | SeverityUnknown |
|---|
CVE-2019-0217CVE-2019-0217 | Exploitation statusNot confirmed | FixNo | Affected productApache HTTP Server | Published04/08/2019 | SeverityUnknown |
|---|
CVE-2019-0215CVE-2019-0215 | Exploitation statusNot confirmed | FixNo | Affected productApache HTTP Server | Published04/08/2019 | SeverityUnknown |
|---|
CVE-2019-0211CVE-2019-0211 | Exploitation statusKEV | FixNo | Affected productApache HTTP Server | Published04/08/2019 | SeverityHigh |
|---|
CVE-2019-0222CVE-2019-0222 | Exploitation statusNot confirmed | FixNo | Affected productApache ActiveMQ | Published03/28/2019 | SeverityUnknown |
|---|
CVE-2016-3081CVE-2016-3081 | Exploitation statusKEV | FixYes | Affected productstruts | Published04/26/2016 | SeverityHigh |
|---|
23 Results | Page 1 of 1