Vendor history
apache
Cumulative CVEs
2,750
across 258 monthly snapshots
Peak rank
#3
Jan 12
First seen
Sep 99
Latest seen
Jun 26
In CISA KEV
19
last 60 snapshots
Critical
293
last 60 snapshots
With exploits
72
public exploit references
CVEs per month
Newest period on the right. Hover a point for detail · click to open that monthly report.
Jun 21Jun 26
Monthly history
Last 60 months · newest first.
| Period | Rank | Δ | CVEs | Critical | KEV | Nuclei | avg CVSS | Top products |
|---|---|---|---|---|---|---|---|---|
| Jun 26 | #9 | ↑1 | 94 | 17 | · | · | 7.1 | airflow (17) · http server (13) · apisix (12) |
| May 26 | #10 | ↑1 | 80 | 18 | · | · | 7.3 | ofbiz (17) · http server (11) · cloudstack (7) |
| Apr 26 | #11 | — | 84 | 11 | 1 | 4 | 7.3 | airflow (15) · tomcat (10) · camel (9) |
| Mar 26 | #56 | — | 20 | 4 | · | · | 7.1 | airflow (4) · ranger (2) · activemq artemis (2) |
| Feb 26 | #54 | — | 20 | 2 | · | · | 6.9 | airflow (5) · superset (5) · syncope (2) |
| Jan 26 | #34 | — | 22 | 3 | · | · | 7.3 | nimble (4) · nuttx (2) · solr (2) |
| Dec 25 | #40 | — | 20 | 3 | · | 1 | 7.6 | http server (5) · fineract (3) · streampark (3) |
| Nov 25 | #35 | — | 19 | 1 | · | · | 6.4 | openoffice (7) · cloudstack (2) · kvrocks (2) |
| Oct 25 | #49 | — | 20 | 3 | · | · | 7.2 | tomcat (3) · airflow (3) · kylin (3) |
| Sep 25 | #67 | — | 10 | 1 | · | · | 7.3 | dolphinscheduler (2) · iotdb (2) · hertzbeat (2) |
| Aug 25 | #50 | — | 20 | 3 | · | · | 7.2 | superset (4) · zeppelin (3) · tomcat (2) |
| Jul 25 | #48 | — | 24 | 1 | · | · | 7.2 | http server (9) · tomcat (3) · jspwiki (2) |
| Jun 25 | #37 | — | 21 | 5 | · | 1 | 7.9 | cloudstack (5) · kafka (3) · tomcat (3) |
| May 25 | #55 | — | 15 | 4 | · | · | 8.0 | inlong (3) · iotdb (3) · superset (2) |
| Apr 25 | #45 | — | 19 | 4 | · | 1 | 7.5 | tomcat (2) · activemq artemis (2) · http server (1) |
| Mar 25 | #40 | — | 23 | 3 | 1 | 2 | 6.4 | traffic server (4) · vcl (2) · camel (2) |
| Feb 25 | #59 | — | 13 | 2 | · | · | 7.4 | cassandra (3) · james server (2) · kvrocks (1) |
| Jan 25 | #45 | — | 16 | 2 | · | · | 6.9 | ambari (3) · solr (2) · ranger (2) |
| Dec 24 | #38 | — | 17 | 7 | · | 2 | 7.5 | superset (4) · tomcat (3) · hive (2) |
| Nov 24 | #38 | — | 26 | 6 | · | · | 7.4 | tomcat (4) · traffic server (4) · nimble (4) |
| Oct 24 | #44 | — | 15 | 1 | · | 1 | 7.1 | cloudstack (4) · solr (2) · syncope (1) |
| Sep 24 | #47 | ↓6 | 14 | 2 | 1 | 2 | 7.3 | ofbiz (2) · airflow (2) · druid (2) |
| Aug 24 | #41 | — | 20 | 4 | 1 | 2 | 7.5 | dolphinscheduler (3) · linkis (2) · hertzbeat (2) |
| Jul 24 | #23 | — | 46 | 9 | 1 | 5 | 7.4 | http server (11) · streampark (7) · streampipes (3) |
| Jun 24 | #67 | — | 10 | 4 | · | 2 | 7.7 | submarine (3) · allura (2) · superset (1) |
| May 24 | #143 | — | 8 | 3 | 1 | 2 | 7.5 | superset (1) · airflow (1) · activemq (1) |
| Apr 24 | #36 | — | 27 | 5 | 1 | 2 | 6.7 | zeppelin (10) · http server (3) · cloudstack (3) |
| Mar 24 | #33 | — | 28 | 5 | · | 1 | 7.3 | pulsar (5) · archiva (3) · fineract (3) |
| Feb 24 | #21 | — | 41 | 11 | · | · | 7.3 | superset (6) · dolphinscheduler (5) · solr (4) |
| Jan 24 | #59 | — | 15 | 3 | · | 2 | 7.1 | airflow (3) · servicecomb (2) · inlong (2) |
| Dec 23 | #30 | — | 28 | 6 | · | 5 | 7.4 | airflow (4) · hertzbeat (3) · ofbiz (3) |
| Nov 23 | #25 | — | 26 | 6 | · | 2 | 7.1 | superset (6) · dolphinscheduler (3) · cocoon (2) |
| Oct 23 | #32 | — | 25 | 3 | 2 | 4 | 7.1 | airflow (6) · tomcat (4) · inlong (4) |
| Sep 23 | #45 | — | 17 | 1 | · | · | 5.8 | superset (8) · airflow (2) · tomcat connectors (1) |
| Aug 23 | #52 | — | 16 | 1 | · | 1 | 7.2 | airflow (4) · xml graphics batik (2) · traffic server (2) |
| Jul 23 | #30 | — | 29 | 8 | · | 1 | 7.8 | airflow (5) · pulsar (4) · inlong (3) |
| Jun 23 | #41 | — | 16 | 1 | · | · | 6.9 | traffic server (3) · apache-airflow-providers-odbc (2) · struts (2) |
| May 23 | #22 | — | 31 | 10 | 1 | 1 | 7.9 | inlong (11) · streampark (3) · openmeetings (3) |
| Apr 23 | #40 | — | 21 | 8 | 1 | 2 | 7.6 | linkis (5) · superset (4) · apache-airflow-providers-apache-spark (1) |
| Feb 23 | #48 | — | 16 | 5 | · | 1 | 8.3 | inlong (2) · apache-airflow-providers-google (2) · sling jcr base (1) |
| Jan 23 | #35 | — | 25 | 6 | · | 1 | 7.4 | superset (7) · http server (3) · iotdb (2) |
| Dec 22 | #43 | — | 18 | 6 | · | · | 7.7 | traffic server (3) · zeppelin (2) · cxf (2) |
| Nov 22 | #29 | — | 27 | 8 | · | 1 | 7.8 | airflow (9) · dolphinscheduler (3) · archiva (2) |
| Oct 22 | #49 | — | 17 | 6 | · | 1 | 7.9 | isis (2) · batik (2) · commons jxpath (2) |
| Sep 22 | #32 | — | 26 | 5 | · | 2 | 7.3 | ofbiz (5) · pulsar (4) · airflow (4) |
| Aug 22 | #30 | — | 26 | 3 | · | · | 7.7 | traffic server (6) · jspwiki (5) · geode (3) |
| Jul 22 | #52 | — | 13 | 3 | 1 | 1 | 7.6 | druid (2) · spark (1) · apache calcite avatica (1) |
| Jun 22 | #38 | — | 18 | 5 | · | 3 | 7.4 | http server (8) · hadoop (2) · sling commons log (1) |
| May 22 | #69 | — | 9 | 2 | · | 2 | 7.4 | tika (3) · tomcat (2) · maven shared utils (1) |
| Apr 22 | #63 | — | 11 | 4 | 1 | 2 | 7.8 | subversion (2) · nifi (2) · superset (1) |
| Mar 22 | #52 | — | 12 | 5 | · | 5 | 8.2 | http server (4) · traffic server (2) · cloudstack (1) |
| Feb 22 | #50 | — | 14 | 3 | 1 | 4 | 7.5 | jspwiki (2) · gobblin (2) · airflow (2) |
| Jan 22 | #29 | — | 32 | 7 | · | 4 | 7.6 | kylin (6) · james (4) · shenyu (4) |
| Dec 21 | #40 | — | 14 | 5 | 2 | 5 | 8.0 | log4j (5) · http server (2) · sling commons messaging mail (1) |
| Nov 21 | #26 | — | 24 | 7 | · | 2 | 7.9 | ozone (8) · traffic server (6) · superset (2) |
| Oct 21 | #37 | — | 15 | 4 | 2 | 4 | 7.6 | openoffice (5) · http server (3) · storm (2) |
| Sep 21 | #27 | — | 22 | 11 | 1 | 6 | 8.4 | dubbo (4) · http server (4) · zeppelin (3) |
| Aug 21 | #76 | — | 8 | 2 | · | 2 | 7.5 | ofbiz (2) · servicecomb (1) · airflow (1) |
| Jul 21 | #34 | — | 16 | 1 | · | 2 | 6.7 | commons compress (4) · tomcat (3) · ant (2) |
| Jun 21 | #36 | ↑15 | 21 | 4 | · | 7 | 7.4 | http server (8) · traffic server (5) · pdfbox (2) |