Apache

Security Scorecard

Score

9F

Total CVEs

943

Patch Rate

6%

54 patched

Avg Response

275d

days to patch

Critical Gaps

21

exploitable, no detection

Severity Breakdown

Critical4
High19
Medium67
Low0

Patch Status

Patched54 (6%)
Partial/Workaround5 (1%)
Unpatched884 (94%)

CVEs (949)

CVE IDTitleSeverityScoreDaysPatch
CVE-1999-0107Apache HTTP Server Buffer OverflowMEDIUM5.010213dUnpatched
CVE-1999-0071Apache httpd Cookie Buffer OverflowHIGH7.510331dUnpatched
CVE-1999-0070Apache HTTP Server Remote File Inclusion VulnerabilityMEDIUM5.010849dUnpatched
CVE-2025-67898MJML ExploitN/A-0dUnpatched
CVE-2025-66388Apache Airflow UI Secret ExposureN/A-0dUnpatched
CVE-2025-67735Netty Smuggling VulnerabilityN/A-0dUnpatched
CVE-2025-46295Apache Commons Text Interpolation VulnerabilityN/A-2dUnpatched
CVE-2025-67895Airflow Edge3 RPC RCEN/A-1dUnpatched
CVE-2025-68387Vega AST Evaluator XSSN/A-0dUnpatched