Apache
Security Scorecard
Score
13F
Total CVEs
1,018
Patch Rate
12%
126 patched
Avg Response
521d
days to patch
Critical Gaps
20
exploitable, no detection
Severity Breakdown
Critical10
High57
Medium98
Low0
Patch Status
Patched126 (12%)
Partial/Workaround2 (0%)
Unpatched890 (87%)
CVEs (1,028)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2023-53976 | MyBB Forums XSS | Medium | 6.4 | - | Patched |
| CVE-2023-53978 | MyBB Forums XSS | Medium | 6.4 | - | Patched |
| CVE-2025-66524 | Apache NiFi Cache Bypass | High | 8.8 | - | Patched |
| CVE-2025-68390 | Elasticsearch Memory Denial of Service | Medium | 4.9 | - | Patched |
| CVE-2025-68161 | Log4Shell Vulnerability | Medium | 4.8 | - | Patched |
| CVE-2023-53919 | PodcastGenerator XSS | Medium | 4.6 | - | Patched |
| CVE-2025-65835 | Cordova Social Sharing Plugin Vulnerability | Medium | 6.2 | - | Patched |
| CVE-2025-58130 | Apache Fineract Vulnerability | Critical | 9.1 | 14d | Unpatched |
| CVE-2025-26866 | Hugegraph Raft Node Exploitation | High | 8.8 | - | Patched |
| CVE-2025-58137 | Apache Fineract Bypass | High | 8.1 | - | Patched |