1,809 CVEs
34 in CISA KEV
Apache Software Foundation Vulnerabilities
CVE security advisories and vulnerability history for Apache Software Foundation.
1,809
Total CVEs
Published
34
In CISA KEV
Exploited in the wild
101
Public exploits
With known exploit
7.3
Avg CVSS
2012–2026
Overview
Apache Software Foundation has 1,809 published CVE records since 2012, of which 34 are in CISA's Known Exploited Vulnerabilities catalog and 101 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Apache Software Foundation products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.