Apache
Security Scorecard
Score
13F
Total CVEs
1,021
Patch Rate
13%
129 patched
Avg Response
521d
days to patch
Critical Gaps
20
exploitable, no detection
Severity Breakdown
Critical10
High58
Medium100
Low0
Patch Status
Patched129 (13%)
Partial/Workaround2 (0%)
Unpatched890 (87%)
CVEs (1,029)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-58130 | Apache Fineract Vulnerability | Critical | 9.1 | 14d | Unpatched |
| CVE-2025-26866 | Hugegraph Raft Node Exploitation | High | 8.8 | - | Patched |
| CVE-2025-58137 | Apache Fineract Bypass | High | 8.1 | - | Patched |
| CVE-2025-67508 | Gardenerctl Vulnerability | High | 8.0 | - | Patched |
| CVE-2025-54981 | StreamPark Weak Encryption Bypass | High | 7.5 | - | Patched |
| CVE-2025-23408 | Apache Fineract Weak Password Requirements | Medium | 6.5 | - | Patched |
| CVE-2025-53960 | Apache StreamPark JWT Bypass | Medium | 5.9 | 21d | Unpatched |
| CVE-2025-54947 | CVE-2025-54947 | Medium | 5.3 | - | Patched |
| CVE-2025-66675 | Apache Struts Denial of Service | High | 8.2 | - | Patched |
| CVE-2025-67635 | Jenkins CLI Denial of Service | High | 7.5 | - | Patched |