Apache: known exploited vulnerabilities
Generated from CISA's catalogue of known exploited vulnerabilities as of 3 November 2026.
From CISA's catalogue, 36 entries in Apache that Vardion has a check for. The newest first.
| CVE | Product | Since | |
|---|---|---|---|
| CVE-2026-34486 | Apache Tomcat | ||
| CVE-2026-34197 | Apache ActiveMQ | ||
| CVE-2024-38475 | Apache HTTP Server | ||
| CVE-2025-24813 | Apache Tomcat | ||
| CVE-2024-45195 | Apache OFBiz | ||
| CVE-2024-27348 | Apache HugeGraph-Server | ||
| CVE-2024-38856 | Apache OFBiz | ||
| CVE-2024-32113 | Apache OFBiz | ||
| CVE-2020-17519 | Apache Flink | ||
| CVE-2023-27524 | Apache Superset | ||
| CVE-2023-46604 | Apache ActiveMQ | Ransomware | |
| CVE-2023-33246 | Apache RocketMQ | ||
| CVE-2021-45046 | Apache Log4j2 | Ransomware | |
| CVE-2022-33891 | Apache Spark | ||
| CVE-2022-24706 | Apache CouchDB | ||
| CVE-2022-24112 | Apache APISIX | ||
| CVE-2020-1956 | Apache Kylin | ||
| CVE-2017-12617 | Apache Tomcat | ||
| CVE-2017-12615 | Apache Tomcat | Ransomware | |
| CVE-2013-2251 | Apache Struts | ||
| CVE-2020-1938 | Apache Tomcat | ||
| CVE-2017-9791 | Apache Struts 1 | ||
| CVE-2016-3088 | Apache ActiveMQ | ||
| CVE-2020-13927 | Apache Airflow's Experimental API | ||
| CVE-2020-11978 | Apache Airflow | ||
| CVE-2021-44228 | Apache Log4j2 | Ransomware | |
| CVE-2019-0193 | Apache Solr | ||
| CVE-2021-40438 | Apache Apache | Ransomware | |
| CVE-2021-42013 | Apache HTTP Server | Ransomware | |
| CVE-2021-41773 | Apache HTTP Server | Ransomware | |
| CVE-2020-17530 | Apache Struts | ||
| CVE-2019-17558 | Apache Solr | ||
| CVE-2018-11776 | Apache Struts | ||
| CVE-2017-9805 | Apache Struts | ||
| CVE-2017-5638 | Apache Struts | Ransomware | |
| CVE-2016-4437 | Apache Shiro |
Know before an attacker does
Vardion scans the servers and websites you approve on the schedule you set. A known exploited vulnerability it finds goes to the top of the fix list.