Apache: ثغرات مُستغلّة
- 41ثغرة مُستغلّة
- 8تستخدمها برامج الفدية
- 08/10/2026آخر ما أُضيف
- Struts 6
- Tomcat 6
- HTTP Server 4
- ActiveMQ 3
- OFBiz 3
- Log4j2 2
- Struts 1 2
- Solr 2
- HugeGraph-Server 1
- Flink 1
- Superset 1
- RocketMQ 1
- Spark 1
- CouchDB 1
- APISIX 1
- Kylin 1
- Struts 2 1
- Airflow's Experimental API 1
- Airflow 1
- Apache 1
- Shiro 1
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 08/10/2026 | Command Injection | Struts | مرتفع 8.1 | 97% |
| 04/08/2026 | Missing Encryption of Sensitive Data | Tomcat | مرتفع 7.5 | 99% |
| 16/04/2026 | Improper Input Validation | ActiveMQ | مرتفع 8.8 | 98% |
| 01/05/2025 | Improper Escaping of Output | HTTP Server | حرجة 9.1 | >99.9% |
| 01/04/2025 | Path Equivalence | Tomcat | حرجة 10.0 | 99.9% |
| 04/02/2025 | Forced Browsing | OFBiz | حرجة 9.8 | >99.9% |
| 18/09/2024 | Improper Access Control | HugeGraph-Server | حرجة 9.8 | 99.2% |
| 27/08/2024 | Incorrect Authorization | OFBiz | مرتفع 8.1 | 99.4% |
| 07/08/2024 | Path Traversal | OFBiz | حرجة 9.1 | 99.9% |
| 23/05/2024 | Improper Access Control | Flink | حرجة 9.1 | 98% |
| 08/01/2024 | Insecure Default Initialization of Resource | Superset | مرتفع 8.9 | 98% |
| 02/11/2023 | Deserialization of Untrusted Data | ActiveMQ | حرجة 10.0 | 99.9% |
| 06/09/2023 | Command Execution | RocketMQ | حرجة 9.8 | 97% |
| 12/05/2023 | Remote Code Execution | Tomcat | حرجة 9.8 | 90% |
| 01/05/2023 | Deserialization of Untrusted Data | Log4j2 | حرجة 9.0 | >99.9% |
| 07/03/2023 | Command Injection | Spark | مرتفع 8.8 | 93% |
| 25/08/2022 | Insecure Default Initialization of Resource | CouchDB | حرجة 9.8 | 93% |
| 25/08/2022 | Authentication Bypass | APISIX | حرجة 9.8 | 96% |
| 25/03/2022 | OS Command Injection | Kylin | مرتفع 8.8 | 97% |
| 25/03/2022 | Remote Code Execution | Tomcat | مرتفع 8.1 | >99.9% |
| 25/03/2022 | on Windows Remote Code Execution | Tomcat | مرتفع 8.1 | 99.7% |
| 25/03/2022 | Improper Input Validation | Struts | حرجة 9.8 | >99.9% |
| 03/03/2022 | Improper Privilege Management | Tomcat | حرجة 9.8 | 99.3% |
| 10/02/2022 | Improper Input Validation | Struts 1 | حرجة 9.8 | 99% |
| 10/02/2022 | Improper Input Validation | ActiveMQ | حرجة 9.8 | 99% |
| 21/01/2022 | Improper Input Validation | Struts 2 | حرجة 9.8 | 76% |
| 21/01/2022 | ActionForm Denial-of-Service | Struts 1 | مرتفع 7.5 | 55% |
| 18/01/2022 | Authentication Bypass | Airflow's Experimental API | حرجة 9.8 | 99.8% |
| 18/01/2022 | Command Injection | Airflow | مرتفع 8.8 | 99.2% |
| 10/12/2021 | Remote Code Execution | Log4j2 | حرجة 10.0 | >99.9% |
| 10/12/2021 | DataImportHandler Code Injection | Solr | مرتفع 7.2 | 84% |
| 01/12/2021 | HTTP Server-Side Request Forgery (SSRF) | Apache | حرجة 9.0 | >99.9% |
| 03/11/2021 | Path Traversal | HTTP Server | حرجة 9.8 | >99.9% |
| 03/11/2021 | Path Traversal | HTTP Server | مرتفع 7.5 | >99.9% |
| 03/11/2021 | Remote Code Execution | Struts | حرجة 9.8 | 96% |
| 03/11/2021 | VelocityResponseWriter Plug-In Remote Code Execution | Solr | مرتفع 7.5 | 99% |
| 03/11/2021 | Privilege Escalation | HTTP Server | مرتفع 7.8 | 65% |
| 03/11/2021 | Remote Code Execution | Struts | مرتفع 8.1 | >99.9% |
| 03/11/2021 | Deserialization of Untrusted Data | Struts | مرتفع 8.1 | 99.4% |
| 03/11/2021 | Remote Code Execution | Struts | حرجة 9.8 | >99.9% |
| 03/11/2021 | Code Execution | Shiro | حرجة 9.8 | 93% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.