Apache: 악용된 취약점
- 41악용된 취약점
- 8랜섬웨어에 사용됨
- 2026. 10. 8.가장 최근 추가
- Struts 6
- Tomcat 6
- HTTP Server 4
- ActiveMQ 3
- OFBiz 3
- Log4j2 2
- Struts 1 2
- Solr 2
- HugeGraph-Server 1
- Flink 1
- Superset 1
- RocketMQ 1
- Spark 1
- CouchDB 1
- APISIX 1
- Kylin 1
- Struts 2 1
- Airflow's Experimental API 1
- Airflow 1
- Apache 1
- Shiro 1
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 8. | Command Injection | Struts | 높음 8.1 | 97% |
| 2026. 8. 4. | Missing Encryption of Sensitive Data | Tomcat | 높음 7.5 | 99% |
| 2026. 4. 16. | Improper Input Validation | ActiveMQ | 높음 8.8 | 98% |
| 2025. 5. 1. | Improper Escaping of Output | HTTP Server | 치명적 9.1 | >99.9% |
| 2025. 4. 1. | Path Equivalence | Tomcat | 치명적 10.0 | 99.9% |
| 2025. 2. 4. | Forced Browsing | OFBiz | 치명적 9.8 | >99.9% |
| 2024. 9. 18. | Improper Access Control | HugeGraph-Server | 치명적 9.8 | 99.2% |
| 2024. 8. 27. | Incorrect Authorization | OFBiz | 높음 8.1 | 99.4% |
| 2024. 8. 7. | Path Traversal | OFBiz | 치명적 9.1 | 99.9% |
| 2024. 5. 23. | Improper Access Control | Flink | 치명적 9.1 | 98% |
| 2024. 1. 8. | Insecure Default Initialization of Resource | Superset | 높음 8.9 | 98% |
| 2023. 11. 2. | Deserialization of Untrusted Data | ActiveMQ | 치명적 10.0 | 99.9% |
| 2023. 9. 6. | Command Execution | RocketMQ | 치명적 9.8 | 97% |
| 2023. 5. 12. | Remote Code Execution | Tomcat | 치명적 9.8 | 90% |
| 2023. 5. 1. | Deserialization of Untrusted Data | Log4j2 | 치명적 9.0 | >99.9% |
| 2023. 3. 7. | Command Injection | Spark | 높음 8.8 | 93% |
| 2022. 8. 25. | Insecure Default Initialization of Resource | CouchDB | 치명적 9.8 | 93% |
| 2022. 8. 25. | Authentication Bypass | APISIX | 치명적 9.8 | 96% |
| 2022. 3. 25. | OS Command Injection | Kylin | 높음 8.8 | 97% |
| 2022. 3. 25. | Remote Code Execution | Tomcat | 높음 8.1 | >99.9% |
| 2022. 3. 25. | on Windows Remote Code Execution | Tomcat | 높음 8.1 | 99.7% |
| 2022. 3. 25. | Improper Input Validation | Struts | 치명적 9.8 | >99.9% |
| 2022. 3. 3. | Improper Privilege Management | Tomcat | 치명적 9.8 | 99.3% |
| 2022. 2. 10. | Improper Input Validation | Struts 1 | 치명적 9.8 | 99% |
| 2022. 2. 10. | Improper Input Validation | ActiveMQ | 치명적 9.8 | 99% |
| 2022. 1. 21. | Improper Input Validation | Struts 2 | 치명적 9.8 | 76% |
| 2022. 1. 21. | ActionForm Denial-of-Service | Struts 1 | 높음 7.5 | 55% |
| 2022. 1. 18. | Authentication Bypass | Airflow's Experimental API | 치명적 9.8 | 99.8% |
| 2022. 1. 18. | Command Injection | Airflow | 높음 8.8 | 99.2% |
| 2021. 12. 10. | Remote Code Execution | Log4j2 | 치명적 10.0 | >99.9% |
| 2021. 12. 10. | DataImportHandler Code Injection | Solr | 높음 7.2 | 84% |
| 2021. 12. 1. | HTTP Server-Side Request Forgery (SSRF) | Apache | 치명적 9.0 | >99.9% |
| 2021. 11. 3. | Path Traversal | HTTP Server | 치명적 9.8 | >99.9% |
| 2021. 11. 3. | Path Traversal | HTTP Server | 높음 7.5 | >99.9% |
| 2021. 11. 3. | Remote Code Execution | Struts | 치명적 9.8 | 96% |
| 2021. 11. 3. | VelocityResponseWriter Plug-In Remote Code Execution | Solr | 높음 7.5 | 99% |
| 2021. 11. 3. | Privilege Escalation | HTTP Server | 높음 7.8 | 65% |
| 2021. 11. 3. | Remote Code Execution | Struts | 높음 8.1 | >99.9% |
| 2021. 11. 3. | Deserialization of Untrusted Data | Struts | 높음 8.1 | 99.4% |
| 2021. 11. 3. | Remote Code Execution | Struts | 치명적 9.8 | >99.9% |
| 2021. 11. 3. | Code Execution | Shiro | 치명적 9.8 | 93% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.