Apache

Security Scorecard

Score

13F

Total CVEs

1,018

Patch Rate

12%

126 patched

Avg Response

521d

days to patch

Critical Gaps

20

exploitable, no detection

Severity Breakdown

Critical10
High57
Medium98
Low0

Patch Status

Patched126 (12%)
Partial/Workaround2 (0%)
Unpatched890 (87%)

CVEs (1,028)

CVE IDTitleSeverityScoreDaysPatch
CVE-2025-47346Log4j Memory CorruptionHigh7.8-Patched
CVE-2025-66518Apache Kyuubi Server Remote File Inclusion VulnerabilityHigh8.8-Patched
CVE-2025-68620SignalK Server VulnerabilityCritical9.1-Patched
CVE-2025-47411Apache StreamPipes JWT Token Tampering VulnerabilityHigh8.1-Patched
CVE-2025-48768Apache NuttX RTOS Denial of ServiceMedium6.54dUnpatched
CVE-2025-48769Apache NuttX RTOS Use After Free VulnerabilityHigh8.1-Patched
CVE-2025-34468CoAP Stack Overflow VulnerabilityCritical9.8-Patched
CVE-2025-66864BinUtils Denial of Service VulnerabilityHigh7.5-Patched
CVE-2025-68615Net-SNMP Buffer OverflowCritical9.8-Patched
CVE-2025-14401PDFsam Enhanced App Out-Of-Bounds Read Remote Code Execution VulnerabilityHigh7.8-Patched