Apache
Security Scorecard
Score
13F
Total CVEs
1,021
Patch Rate
13%
129 patched
Avg Response
521d
days to patch
Critical Gaps
20
exploitable, no detection
Severity Breakdown
Critical10
High58
Medium100
Low0
Patch Status
Patched129 (13%)
Partial/Workaround2 (0%)
Unpatched890 (87%)
CVEs (1,029)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2024-3884 | CVE-2024-3884 | High | 7.5 | 29d | Unpatched |
| CVE-2025-59789 | - | High | 7.5 | 12d | Patched |
| CVE-2025-64775 | Apache Struts Denial of Service | High | 7.5 | - | Patched |
| CVE-2025-59792 | - | Medium | 5.3 | 17d | Patched |
| CVE-2025-59790 | - | Medium | 5.4 | 17d | Patched |
| CVE-2025-54057 | - | Medium | 6.1 | 18d | Patched |
| CVE-2025-59302 | - | Medium | 4.7 | 18d | Patched |
| CVE-2025-59454 | - | Medium | 4.3 | 18d | Unpatched |
| CVE-2025-62728 | - | Medium | 5.4 | 19d | Unpatched |
| CVE-2025-59390 | Apache Druid Kerberos Auth Bypass | Critical | 9.8 | - | Patched |