Vendor history
apache
Cumulative CVEs
2,937
across 277 monthly snapshots
Peak rank
#3
Jan 12
First seen
Sep 99
Latest seen
Jun 26
CVEs per month
Newest period on the right. Hover a point for detail · click to open that monthly report.
Jul 21Jun 26
Monthly history
Last 60 months · newest first.
| Period | Rank | Δ | CVEs | Critical | KEV | Nuclei | avg CVSS | Top products |
|---|---|---|---|---|---|---|---|---|
| Jun 26 | #4 | — | 30 | 1 | · | · | 6.6 | airflow (17) · activemq (6) · activemq broker (4) |
| May 26 | #7 | ↑7 | 80 | 18 | · | · | 7.3 | ofbiz (17) · http server (11) · tomcat (7) |
| Apr 26 | #14 | — | 84 | 11 | 1 | 4 | 7.3 | airflow (15) · tomcat (10) · camel (9) |
| Mar 26 | #63 | — | 20 | 4 | · | · | 7.1 | airflow (4) · ranger (2) · activemq artemis (2) |
| Feb 26 | #57 | — | 20 | 2 | · | · | 6.9 | airflow (5) · superset (5) · syncope (2) |
| Jan 26 | #40 | — | 22 | 3 | · | · | 7.3 | nimble (4) · nuttx (2) · solr (2) |
| Dec 25 | #44 | — | 20 | 3 | · | 1 | 7.6 | http server (5) · fineract (3) · streampark (3) |
| Nov 25 | #42 | — | 19 | 1 | · | · | 6.4 | openoffice (7) · cloudstack (2) · kvrocks (2) |
| Oct 25 | #55 | — | 20 | 3 | · | · | 7.2 | tomcat (3) · kylin (3) · airflow (3) |
| Sep 25 | #76 | — | 10 | 1 | · | · | 7.3 | dolphinscheduler (2) · iotdb (2) · hertzbeat (2) |
| Aug 25 | #55 | — | 20 | 3 | · | · | 7.2 | superset (4) · zeppelin (3) · tomcat (2) |
| Jul 25 | #56 | — | 24 | 1 | · | · | 7.2 | http server (9) · tomcat (3) · jspwiki (2) |
| Jun 25 | #42 | — | 21 | 5 | · | 1 | 7.9 | cloudstack (5) · kafka (3) · tomcat (3) |
| May 25 | #64 | — | 15 | 4 | · | · | 8.0 | inlong (3) · iotdb (3) · superset (2) |
| Apr 25 | #54 | — | 19 | 4 | · | 1 | 7.5 | activemq artemis (2) · tomcat (2) · answer (1) |
| Mar 25 | #45 | — | 23 | 3 | 1 | 2 | 6.4 | traffic server (4) · vcl (2) · camel (2) |
| Feb 25 | #68 | — | 13 | 2 | · | · | 7.4 | cassandra (3) · james server (2) · kvrocks (1) |
| Jan 25 | #52 | — | 16 | 2 | · | · | 6.9 | ambari (3) · solr (2) · ranger (2) |
| Dec 24 | #42 | — | 17 | 7 | · | 2 | 7.5 | superset (4) · tomcat (3) · hive (2) |
| Nov 24 | #44 | — | 26 | 6 | · | · | 7.4 | tomcat (4) · traffic server (4) · nimble (4) |
| Oct 24 | #55 | — | 15 | 1 | · | 1 | 7.1 | cloudstack (4) · solr (2) · activemq artemis (1) |
| Sep 24 | #56 | ↓10 | 14 | 2 | 1 | 2 | 7.3 | ofbiz (2) · airflow (2) · druid (2) |
| Aug 24 | #46 | — | 20 | 4 | 1 | 2 | 7.5 | dolphinscheduler (3) · linkis (2) · hertzbeat (2) |
| Jul 24 | #26 | — | 46 | 9 | 1 | 5 | 7.4 | http server (11) · streampark (7) · traffic server (3) |
| Jun 24 | #78 | — | 10 | 4 | · | 2 | 7.7 | submarine (3) · allura (2) · superset (1) |
| May 24 | #154 | — | 8 | 3 | 1 | 2 | 7.5 | activemq (1) · airflow (1) · apisix (1) |
| Apr 24 | #42 | — | 27 | 5 | 1 | 2 | 6.7 | zeppelin (10) · http server (3) · cloudstack (3) |
| Mar 24 | #36 | — | 28 | 5 | · | 1 | 7.3 | pulsar (5) · doris (3) · airflow (3) |
| Feb 24 | #25 | — | 41 | 11 | · | · | 7.3 | superset (6) · dolphinscheduler (5) · solr (4) |
| Jan 24 | #68 | — | 15 | 3 | · | 2 | 7.1 | airflow (3) · servicecomb (2) · inlong (2) |
| Dec 23 | #36 | — | 28 | 6 | · | 5 | 7.4 | airflow (4) · superset (3) · hertzbeat (3) |
| Nov 23 | #30 | — | 26 | 6 | · | 2 | 7.1 | superset (6) · dolphinscheduler (3) · cocoon (2) |
| Oct 23 | #41 | — | 25 | 3 | 2 | 4 | 7.1 | airflow (6) · tomcat (4) · inlong (4) |
| Sep 23 | #56 | — | 17 | 1 | · | · | 5.8 | superset (8) · airflow (2) · tomcat connectors (1) |
| Aug 23 | #61 | — | 16 | 1 | · | 1 | 7.2 | airflow (4) · xml graphics batik (2) · traffic server (2) |
| Jul 23 | #38 | — | 29 | 8 | · | 1 | 7.8 | airflow (5) · pulsar (4) · inlong (3) |
| Jun 23 | #48 | — | 16 | 1 | · | · | 6.9 | traffic server (3) · apache-airflow-providers-odbc (2) · struts (2) |
| May 23 | #23 | — | 31 | 10 | 1 | 1 | 7.9 | inlong (11) · streampark (3) · openmeetings (3) |
| Apr 23 | #46 | — | 21 | 8 | 1 | 2 | 7.6 | linkis (5) · superset (4) · apache-airflow-providers-apache-spark (1) |
| Mar 23 | #57 | — | 16 | 2 | · | 1 | 7.2 | fineract (3) · openoffice (2) · http server (2) |
| Feb 23 | #52 | — | 16 | 5 | · | 1 | 8.3 | inlong (2) · apache-airflow-providers-google (2) · sling jcr base (1) |
| Jan 23 | #41 | — | 25 | 6 | · | 1 | 7.4 | superset (7) · http server (3) · iotdb (2) |
| Dec 22 | #46 | — | 18 | 6 | · | · | 7.7 | traffic server (3) · zeppelin (2) · cxf (2) |
| Nov 22 | #32 | — | 27 | 8 | · | 1 | 7.8 | airflow (9) · dolphinscheduler (3) · archiva (2) |
| Oct 22 | #55 | — | 17 | 6 | · | 1 | 7.9 | isis (2) · batik (2) · commons jxpath (2) |
| Sep 22 | #36 | — | 26 | 5 | · | 2 | 7.3 | ofbiz (5) · pulsar (4) · airflow (4) |
| Aug 22 | #33 | — | 26 | 3 | · | · | 7.7 | traffic server (6) · jspwiki (5) · geode (3) |
| Jul 22 | #60 | — | 13 | 3 | 1 | 1 | 7.6 | druid (2) · spark (1) · apache calcite avatica (1) |
| Jun 22 | #41 | — | 18 | 5 | · | 3 | 7.4 | http server (8) · hadoop (2) · sling commons log (1) |
| May 22 | #79 | — | 9 | 2 | · | 2 | 7.4 | tika (3) · tomcat (2) · maven shared utils (1) |
| Apr 22 | #71 | — | 11 | 4 | 1 | 2 | 7.8 | subversion (2) · nifi (2) · superset (1) |
| Mar 22 | #56 | — | 12 | 5 | · | 5 | 8.2 | http server (4) · traffic server (2) · cloudstack (1) |
| Feb 22 | #56 | — | 14 | 3 | 1 | 4 | 7.5 | jspwiki (2) · gobblin (2) · airflow (2) |
| Jan 22 | #33 | — | 32 | 7 | · | 4 | 7.6 | kylin (6) · james (4) · shenyu (4) |
| Dec 21 | #45 | — | 14 | 5 | 2 | 5 | 8.0 | log4j (5) · http server (2) · sling commons messaging mail (1) |
| Nov 21 | #29 | — | 24 | 7 | · | 2 | 7.9 | ozone (8) · traffic server (6) · superset (2) |
| Oct 21 | #41 | — | 15 | 4 | 2 | 4 | 7.6 | openoffice (5) · http server (3) · storm (2) |
| Sep 21 | #31 | — | 22 | 11 | 1 | 6 | 8.4 | http server (4) · dubbo (4) · zeppelin (3) |
| Aug 21 | #85 | — | 8 | 2 | · | 2 | 7.5 | ofbiz (2) · servicecomb (1) · airflow (1) |
| Jul 21 | #39 | — | 16 | 1 | · | 2 | 6.7 | commons compress (4) · tomcat (3) · ant (2) |