Apache

Security Scorecard

Score

9F

Total CVEs

943

Patch Rate

6%

55 patched

Avg Response

459d

days to patch

Critical Gaps

21

exploitable, no detection

Severity Breakdown

Critical4
High19
Medium67
Low0

Patch Status

Patched55 (6%)
Partial/Workaround5 (1%)
Unpatched883 (94%)

CVEs (949)

CVE IDTitleSeverityScoreDaysPatch
CVE-2016-3603Zero-Day RCE in a Java Logging LibraryN/A-3144dUnpatched
CVE-2016-3599Apache HTTP Server Remote Code Execution VulnerabilityN/A-3144dUnpatched
CVE-2016-3629Zero-Day in a Java-based Web FrameworkN/A-3144dUnpatched
CVE-2016-3380Apache HTTP Server Remote File Inclusion VulnerabilityN/A-3144dUnpatched
CVE-2016-4636Apache Log4j Remote Code Execution VulnerabilityN/A-3144dUnpatched
CVE-2016-3781Log4ShellN/A-3144dUnpatched
CVE-2016-3784Apache HTTP Server VulnerabilityN/A-3144dUnpatched
CVE-2016-4756Apache Log4j Remote Code Execution VulnerabilityN/A-3144dUnpatched
CVE-2016-4732Apache HTTP Server Remote File Inclusion VulnerabilityN/A-3144dUnpatched
CVE-2016-4937CVE-2016-4937 (Apache POODLE)N/A-3144dUnpatched