Apache
Security Scorecard
Score
9F
Total CVEs
943
Patch Rate
6%
55 patched
Avg Response
459d
days to patch
Critical Gaps
21
exploitable, no detection
Severity Breakdown
Critical4
High19
Medium67
Low0
Patch Status
Patched55 (6%)
Partial/Workaround5 (1%)
Unpatched883 (94%)
CVEs (949)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2017-4416 | Apache HTTP Server Remote Code Execution Vulnerability | N/A | - | 2837d | Unpatched |
| CVE-2017-4429 | Apache HTTP Server Remote Code Execution Vulnerability | N/A | - | 2837d | Unpatched |
| CVE-2017-4423 | Log4Shell | N/A | - | 2837d | Unpatched |
| CVE-2017-4425 | Apache HTTP Server Remote Code Execution Vulnerability | N/A | - | 2837d | Unpatched |
| CVE-2017-4415 | Apache HTTP Server HTTP Header Injection Vulnerability | N/A | - | 2837d | Unpatched |
| CVE-2017-4428 | Apache HTTP Server Remote Code Execution Vulnerability | N/A | - | 2837d | Unpatched |
| CVE-2017-4433 | Zero-Day RCE in Apache HTTP Server | N/A | - | 2837d | Unpatched |
| CVE-2017-4439 | Zero-Day RCE in a Java Logging Library | N/A | - | 2837d | Unpatched |
| CVE-2017-4450 | CVE-2017-4450 - "Apache Log4Shell" | N/A | - | 2837d | Unpatched |
| CVE-2017-4451 | Zero-Day RCE in a Java Logging Library | N/A | - | 2837d | Unpatched |