Vendor history
apache software foundation
Cumulative CVEs
2,143
across 153 monthly snapshots
Peak rank
#3
Jun 26
First seen
Mar 06
Latest seen
Jun 26
CVEs per month
Newest period on the right. Hover a point for detail · click to open that monthly report.
Jul 21Jun 26
Monthly history
Last 60 months · newest first.
| Period | Rank | Δ | CVEs | Critical | KEV | Nuclei | avg CVSS | Top products |
|---|---|---|---|---|---|---|---|---|
| Jun 26 | #3 | — | 31 | 2 | · | · | 6.7 | apache airflow (17) · apache activemq (6) · apache activemq broker (4) |
| May 26 | #5 | ↑7 | 87 | 19 | · | · | 7.3 | apache ofbiz (17) · apache http server (11) · apache cloudstack (7) |
| Apr 26 | #12 | — | 86 | 11 | 1 | 4 | 7.3 | apache airflow (14) · apache tomcat (10) · apache thrift (8) |
| Mar 26 | #64 | — | 20 | 4 | · | · | 6.9 | apache airflow (4) · airflow (4) · apache ranger (2) |
| Feb 26 | #45 | — | 25 | 2 | · | · | 7.1 | apache airflow (5) · apache superset (5) · tomcat (3) |
| Jan 26 | #41 | — | 22 | 3 | · | · | 7.6 | apache mynewt nimble (4) · apache airflow (2) · apache solr (2) |
| Dec 25 | #37 | — | 22 | 4 | · | 1 | 7.7 | apache http server (5) · http server (5) · apache fineract (3) |
| Nov 25 | #43 | — | 19 | 1 | · | · | 6.4 | apache openoffice (7) · openoffice (7) · apache ofbiz (2) |
| Oct 25 | #56 | — | 20 | 3 | · | · | 7.3 | apache airflow (3) · apache kylin (3) · apache tomcat (3) |
| Sep 25 | #72 | — | 12 | 1 | · | · | 7.0 | netty (2) · apache iotdb (2) · apache hertzbeat (incubating) (2) |
| Aug 25 | #53 | — | 21 | 3 | · | · | 7.1 | superset (4) · apache superset (4) · apache zeppelin (3) |
| Jul 25 | #57 | — | 24 | 1 | · | · | 7.2 | http server (9) · apache http server (9) · tomcat (3) |
| Jun 25 | #43 | — | 21 | 5 | · | 1 | 8.0 | apache cloudstack (5) · tomcat (3) · kafka (3) |
| May 25 | #65 | — | 15 | 4 | · | · | 7.8 | inlong (3) · apache inlong (3) · apache iotdb (2) |
| Apr 25 | #55 | — | 19 | 4 | · | 1 | 7.6 | pinot (2) · apache tomcat (2) · tomcat (2) |
| Mar 25 | #46 | — | 23 | 3 | 1 | 2 | 6.3 | apache traffic server (4) · traffic server (4) · commons vfs (virtual file system) (2) |
| Feb 25 | #59 | — | 15 | 2 | · | · | 7.3 | cassandra (3) · apache cassandra (3) · apache james server (2) |
| Jan 25 | #53 | — | 16 | 2 | · | · | 6.8 | apache ambari (3) · apache hive (2) · hive (2) |
| Dec 24 | #43 | — | 17 | 7 | · | 2 | 7.4 | superset (4) · apache superset (4) · apache tomcat (3) |
| Nov 24 | #46 | — | 25 | 6 | · | · | 7.6 | apache tomcat (4) · apache nimble (4) · tomcat (4) |
| Oct 24 | #56 | — | 15 | 1 | · | 1 | 7.2 | apache cloudstack (3) · apache solr (2) · apache avro java sdk (1) |
| Sep 24 | #57 | ↓5 | 14 | 2 | 1 | 2 | 7.5 | apache ofbiz (2) · apache druid (2) · ofbiz (2) |
| Aug 24 | #52 | — | 18 | 4 | 1 | 2 | 7.3 | apache dolphinscheduler (3) · apache cloudstack (2) · apache answer (2) |
| Jul 24 | #27 | — | 46 | 9 | 1 | 5 | 7.4 | apache http server (11) · http server (11) · apache streampark (4) |
| Jun 24 | #59 | — | 12 | 4 | · | 2 | 7.5 | directory ldap api (2) · apache submarine server core (2) · apache allura (2) |
| May 24 | #155 | — | 8 | 3 | 1 | 2 | 7.8 | activemq (1) · apache activemq (1) · apache airflow (1) |
| Apr 24 | #43 | — | 27 | 5 | 1 | 2 | 6.6 | apache zeppelin (9) · apache http server (3) · apache cloudstack (3) |
| Mar 24 | #35 | — | 29 | 5 | · | 1 | 7.2 | pulsar (5) · apache pulsar (5) · airflow (3) |
| Feb 24 | #26 | — | 38 | 8 | · | · | 7.3 | apache superset (6) · apache dolphinscheduler (5) · apache solr (4) |
| Jan 24 | #69 | — | 15 | 3 | · | 2 | 7.3 | apache airflow (3) · apache inlong (2) · apache servicecomb service-center (2) |
| Dec 23 | #42 | — | 24 | 6 | · | 4 | 7.6 | apache airflow (4) · airflow (4) · apache ofbiz (3) |
| Nov 23 | #29 | — | 28 | 6 | · | 2 | 7.2 | apache superset (6) · apache dolphinscheduler (3) · airflow (2) |
| Oct 23 | #39 | — | 26 | 3 | 2 | 4 | 6.9 | apache airflow (6) · airflow (6) · apache inlong (4) |
| Sep 23 | #57 | — | 17 | 1 | · | · | 6.0 | apache superset (8) · superset (4) · airflow (2) |
| Aug 23 | #55 | — | 17 | 1 | · | 1 | 7.2 | airflow (4) · apache airflow (4) · apache airflow spark provider (2) |
| Jul 23 | #39 | — | 29 | 8 | · | 1 | 7.6 | airflow (5) · apache airflow (5) · apache inlong (3) |
| Jun 23 | #47 | — | 18 | 1 | · | · | 6.6 | traffic server (3) · apache traffic server (3) · apache airflow odbc provider (2) |
| May 23 | #24 | — | 31 | 10 | 1 | 1 | 7.8 | apache inlong (11) · inlong (6) · apache streampark (incubating) (3) |
| Apr 23 | #47 | — | 21 | 8 | 1 | 2 | 7.8 | apache linkis (5) · apache superset (4) · apache spark (1) |
| Mar 23 | #58 | — | 16 | 2 | · | 1 | 7.1 | apache fineract (3) · openoffice (2) · http server (2) |
| Feb 23 | #53 | — | 16 | 5 | · | 1 | 8.3 | apache airflow google provider (2) · apache inlong (2) · apache airflow hive provider (1) |
| Jan 23 | #42 | — | 25 | 5 | · | 1 | 7.5 | apache superset (7) · http server (3) · apache http server (3) |
| Dec 22 | #40 | — | 21 | 6 | · | · | 7.4 | apache traffic server (3) · apache cxf (2) · apache zeppelin (2) |
| Nov 22 | #29 | — | 28 | 8 | · | 1 | 7.9 | apache airflow (8) · apache dolphinscheduler (3) · ivy (2) |
| Oct 22 | #52 | — | 20 | 7 | · | 1 | 7.9 | commons jxpath (3) · batik (2) · cassandra (2) |
| Sep 22 | #33 | — | 30 | 5 | · | 2 | 7.3 | apache ofbiz (5) · apache airflow (4) · apache pulsar (4) |
| Aug 22 | #34 | — | 26 | 3 | · | · | 7.9 | apache traffic server (6) · apache jspwiki (5) · geode (3) |
| Jul 22 | #61 | — | 13 | 3 | 1 | 1 | 8.0 | apache druid (2) · apache cloudstack (1) · apache commons configuration (1) |
| Jun 22 | #42 | — | 18 | 5 | · | 3 | 7.6 | apache http server (8) · http server (8) · apache hadoop (2) |
| May 22 | #74 | — | 10 | 2 | · | 2 | 7.5 | apache tika (3) · tomcat (2) · apache tomcat (2) |
| Apr 22 | #66 | — | 13 | 4 | 1 | 2 | 8.1 | log4j (2) · apache nifi (2) · subversion (2) |
| Mar 22 | #57 | — | 12 | 5 | · | 5 | 8.5 | http server (4) · apache http server (4) · apache traffic server (2) |
| Feb 22 | #57 | — | 14 | 3 | 1 | 4 | 7.8 | apache airflow (2) · apache gobblin (2) · apache jspwiki (2) |
| Jan 22 | #34 | — | 32 | 7 | · | 4 | 7.8 | apache kylin (6) · apache shenyu (incubating) (4) · apache james (4) |
| Dec 21 | #42 | — | 17 | 6 | 3 | 6 | 8.1 | log4j (5) · http server (3) · apache log4j2 (3) |
| Nov 21 | #28 | — | 25 | 7 | · | 2 | 8.1 | apache ozone (8) · apache traffic server (6) · traffic server (3) |
| Oct 21 | #39 | — | 17 | 4 | 2 | 4 | 7.8 | apache openoffice (5) · apache http server (3) · openoffice (3) |
| Sep 21 | #32 | — | 22 | 11 | 1 | 6 | 8.3 | http server (4) · apache dubbo (4) · apache http server (4) |
| Aug 21 | #93 | — | 7 | 2 | · | 1 | 7.8 | apache ofbiz (1) · apache airflow (1) · apache http server (1) |
| Jul 21 | #40 | — | 16 | 1 | · | 2 | 6.9 | apache commons compress (4) · commons compress (4) · apache tomcat (3) |