Vendor history
apache software foundation
Cumulative CVEs
2,122
across 138 monthly snapshots
Peak rank
#5
Jul 26
First seen
Mar 06
Latest seen
Jul 26
In CISA KEV
20
last 60 snapshots
Critical
317
last 60 snapshots
With exploits
76
public exploit references
CVEs per month
Newest period on the right. Hover a point for detail · click to open that monthly report.
Jul 21Jul 26
Monthly history
Last 60 months · newest first.
| Period | Rank | Δ | CVEs | Critical | KEV | Nuclei | avg CVSS | Top products |
|---|---|---|---|---|---|---|---|---|
| Jul 26 | #5 | ↑2 | 78 | 24 | · | · | 7.8 | apache camel (22) · apache iotdb (10) · apache airflow (6) |
| Jun 26 | #7 | · | 121 | 21 | · | · | 7.2 | apache airflow (17) · apache activemq (15) · apache http server (13) |
| May 26 | #7 | ↑3 | 87 | 19 | · | · | 7.3 | apache ofbiz (17) · http server (11) · apache http server (11) |
| Apr 26 | #10 | — | 86 | 11 | 1 | 4 | 7.3 | apache airflow (14) · apache tomcat (10) · apache thrift (8) |
| Mar 26 | #57 | — | 20 | 4 | · | · | 6.9 | apache airflow (4) · airflow (4) · apache ranger (2) |
| Feb 26 | #42 | — | 25 | 2 | · | · | 7.1 | apache airflow (5) · apache superset (5) · tomcat (3) |
| Jan 26 | #35 | — | 22 | 3 | · | · | 7.6 | apache mynewt nimble (4) · apache airflow (2) · apache solr (2) |
| Dec 25 | #35 | — | 22 | 4 | · | 1 | 7.7 | apache http server (5) · http server (5) · apache fineract (3) |
| Nov 25 | #36 | — | 19 | 1 | · | · | 6.4 | apache openoffice (7) · openoffice (7) · apache ofbiz (2) |
| Oct 25 | #50 | — | 20 | 3 | · | · | 7.3 | apache kylin (3) · tomcat (3) · apache airflow (3) |
| Sep 25 | #63 | — | 12 | 1 | · | · | 7.0 | netty (2) · apache iotdb (2) · apache hertzbeat (incubating) (2) |
| Aug 25 | #48 | — | 21 | 3 | · | · | 7.1 | apache superset (4) · superset (4) · apache zeppelin (3) |
| Jul 25 | #49 | — | 24 | 1 | · | · | 7.2 | http server (9) · apache http server (9) · tomcat (3) |
| Jun 25 | #38 | — | 21 | 5 | · | 1 | 8.0 | apache cloudstack (5) · tomcat (3) · kafka (3) |
| May 25 | #56 | — | 15 | 4 | · | · | 7.8 | inlong (3) · apache inlong (3) · apache iotdb (2) |
| Apr 25 | #46 | — | 19 | 4 | · | 1 | 7.6 | apache tomcat (2) · apache activemq artemis (2) · pinot (2) |
| Mar 25 | #41 | — | 23 | 3 | 1 | 2 | 6.3 | apache traffic server (4) · traffic server (4) · commons vfs (virtual file system) (2) |
| Feb 25 | #51 | — | 15 | 2 | · | · | 7.3 | cassandra (3) · apache cassandra (3) · apache james server (2) |
| Jan 25 | #46 | — | 16 | 2 | · | · | 6.8 | apache ambari (3) · apache hive (2) · hive (2) |
| Dec 24 | #39 | — | 17 | 7 | · | 2 | 7.4 | superset (4) · apache superset (4) · apache tomcat (3) |
| Nov 24 | #39 | — | 25 | 6 | · | · | 7.6 | apache tomcat (4) · apache nimble (4) · tomcat (4) |
| Oct 24 | #45 | — | 15 | 1 | · | 1 | 7.2 | apache cloudstack (3) · apache solr (2) · apache avro java sdk (1) |
| Sep 24 | #48 | ↓2 | 14 | 2 | 1 | 2 | 7.5 | apache ofbiz (2) · apache druid (2) · ofbiz (2) |
| Aug 24 | #46 | — | 18 | 4 | 1 | 2 | 7.3 | apache dolphinscheduler (3) · apache cloudstack (2) · apache answer (2) |
| Jul 24 | #24 | — | 46 | 9 | 1 | 5 | 7.4 | apache http server (11) · http server (11) · apache streampark (4) |
| Jun 24 | #52 | — | 12 | 4 | · | 2 | 7.5 | directory ldap api (2) · apache submarine server core (2) · apache allura (2) |
| May 24 | #144 | — | 8 | 3 | 1 | 2 | 7.8 | apache apisix (1) · activemq (1) · apache activemq (1) |
| Apr 24 | #37 | — | 27 | 5 | 1 | 2 | 6.6 | apache zeppelin (9) · apache http server (3) · apache cloudstack (3) |
| Mar 24 | #32 | — | 29 | 5 | · | 1 | 7.2 | pulsar (5) · apache pulsar (5) · apache doris (3) |
| Feb 24 | #22 | — | 38 | 8 | · | · | 7.3 | apache superset (6) · apache dolphinscheduler (5) · apache solr (4) |
| Jan 24 | #60 | — | 15 | 3 | · | 2 | 7.3 | apache airflow (3) · apache inlong (2) · apache servicecomb service-center (2) |
| Dec 23 | #36 | — | 24 | 6 | · | 4 | 7.6 | apache airflow (4) · airflow (4) · apache ofbiz (3) |
| Nov 23 | #24 | — | 28 | 6 | · | 2 | 7.2 | apache superset (6) · apache dolphinscheduler (3) · airflow (2) |
| Oct 23 | #31 | — | 26 | 3 | 2 | 4 | 6.9 | airflow (6) · apache airflow (6) · apache inlong (4) |
| Sep 23 | #46 | — | 17 | 1 | · | · | 6.0 | apache superset (8) · superset (4) · airflow (2) |
| Aug 23 | #47 | — | 17 | 1 | · | 1 | 7.2 | airflow (4) · apache airflow (4) · apache airflow spark provider (2) |
| Jul 23 | #31 | — | 29 | 8 | · | 1 | 7.6 | airflow (5) · apache airflow (5) · apache inlong (3) |
| Jun 23 | #40 | — | 18 | 1 | · | · | 6.6 | traffic server (3) · apache traffic server (3) · apache airflow odbc provider (2) |
| May 23 | #23 | — | 31 | 10 | 1 | 1 | 7.8 | apache inlong (11) · inlong (6) · apache streampark (incubating) (3) |
| Apr 23 | #41 | — | 21 | 8 | 1 | 2 | 7.8 | apache linkis (5) · apache superset (4) · apache airflow drill provider (1) |
| Feb 23 | #49 | — | 16 | 5 | · | 1 | 8.3 | apache airflow google provider (2) · apache inlong (2) · apache airflow hive provider (1) |
| Jan 23 | #36 | — | 25 | 5 | · | 1 | 7.5 | apache superset (7) · http server (3) · apache http server (3) |
| Dec 22 | #37 | — | 21 | 6 | · | · | 7.4 | apache traffic server (3) · apache cxf (2) · apache zeppelin (2) |
| Nov 22 | #26 | — | 28 | 8 | · | 1 | 7.9 | apache airflow (8) · apache dolphinscheduler (3) · ivy (2) |
| Oct 22 | #46 | — | 20 | 7 | · | 1 | 7.9 | commons jxpath (3) · batik (2) · cassandra (2) |
| Sep 22 | #29 | — | 30 | 5 | · | 2 | 7.3 | apache ofbiz (5) · apache airflow (4) · apache pulsar (4) |
| Aug 22 | #31 | — | 26 | 3 | · | · | 7.9 | apache traffic server (6) · apache jspwiki (5) · apache avro (3) |
| Jul 22 | #53 | — | 13 | 3 | 1 | 1 | 8.0 | apache druid (2) · apache cloudstack (1) · apache commons configuration (1) |
| Jun 22 | #39 | — | 18 | 5 | · | 3 | 7.6 | apache http server (8) · http server (8) · apache hadoop (2) |
| May 22 | #66 | — | 10 | 2 | · | 2 | 7.5 | apache tika (3) · tomcat (2) · apache tomcat (2) |
| Apr 22 | #58 | — | 13 | 4 | 1 | 2 | 8.1 | log4j (2) · apache nifi (2) · subversion (2) |
| Mar 22 | #53 | — | 12 | 5 | · | 5 | 8.5 | http server (4) · apache http server (4) · apache traffic server (2) |
| Feb 22 | #51 | — | 14 | 3 | 1 | 4 | 7.8 | apache airflow (2) · apache gobblin (2) · apache jspwiki (2) |
| Jan 22 | #30 | — | 32 | 7 | · | 4 | 7.8 | apache kylin (6) · apache shenyu (incubating) (4) · apache james (4) |
| Dec 21 | #37 | — | 17 | 6 | 3 | 6 | 8.1 | log4j (5) · http server (3) · apache log4j2 (3) |
| Nov 21 | #25 | — | 25 | 7 | · | 2 | 8.1 | apache ozone (8) · apache traffic server (6) · traffic server (3) |
| Oct 21 | #34 | — | 17 | 4 | 2 | 4 | 7.8 | apache openoffice (5) · apache http server (3) · openoffice (3) |
| Sep 21 | #28 | — | 22 | 11 | 1 | 6 | 8.3 | http server (4) · apache dubbo (4) · apache http server (4) |
| Aug 21 | #84 | — | 7 | 2 | · | 1 | 7.8 | apache airflow (1) · apache http server (1) · apache nifi - minifi c++ (1) |
| Jul 21 | #35 | — | 16 | 1 | · | 2 | 6.9 | apache commons compress (4) · commons compress (4) · apache tomcat (3) |