Apachesoftwarefoundation Apachesoftwarefoundation

  1. Vendors
  2. Apachesoftwarefoundation

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Apachesoftwarefoundation product.

RSS Feeds for Apachesoftwarefoundation security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Apachesoftwarefoundation products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Apachesoftwarefoundation Sorted by Most Security Vulnerabilities since 2018

Apachesoftwarefoundation Apache Traffic Server2 vulnerabilities

Apachesoftwarefoundation Apache Http Server1 vulnerability

Apachesoftwarefoundation Apache Ofbiz1 vulnerability

By the Year

In 2026 there have been 0 vulnerabilities in Apachesoftwarefoundation. Apachesoftwarefoundation did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2026 0 0.00
2025 0 0.00
2024 4 8.30

It may take a day or so for new Apachesoftwarefoundation vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Apachesoftwarefoundation Security Vulnerabilities

CVE Date Vulnerability Products
CVE-2024-50306 Nov 14, 2024
Apache Traffic Server Privilege Retention Vulnerability on Startup Unchecked return value can allow Apache Traffic Server to retain privileges on startup. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.5, from 10.0.0 through 10.0.1. Users are recommended to upgrade to version 9.2.6 or 10.0.2, which fixes the issue.
Apache Traffic Server
CVE-2024-38479 Nov 14, 2024
Apache Traffic Server 8.0.0-9.2.5: Improper Input Validation Vulnerability Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.5. Users are recommended to upgrade to version 9.2.6, which fixes the issue, or 10.0.2, which does not have the issue.
Apache Traffic Server
CVE-2024-38472 Jul 01, 2024
Apache HTTP Server <2.4.60 SSRF on Windows leaks NTLM Hashes SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing.
Apache Http Server
CVE-2024-36104 Jun 04, 2024
OFBiz Path Traversal (CVE-2024-36104) 18.12.14 Fix Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to version 18.12.14, which fixes the issue.
Apache Ofbiz
Built by Foundeo Inc., with data from the National Vulnerability Database (NVD). Privacy Policy. Use of this site is governed by the Legal Terms
Disclaimer
CONTENT ON THIS WEBSITE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. Always check with your vendor for the most up to date, and accurate information.