How many CVEs does Apache Software Foundation karaf have?

Apache Software Foundation karaf has 13 published CVE records since 2017.

How many Apache Software Foundation karaf CVEs are in CISA KEV?

None of Apache Software Foundation karaf's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Apache Software Foundation karaf vulnerabilities?

No Apache Software Foundation karaf CVEs currently have a tracked public exploit in this dataset.

Which versions of Apache Software Foundation karaf are affected?

146 distinct Apache Software Foundation karaf versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Apache Software Foundation karaf CVEs?

Apache Software Foundation karaf's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).

How many critical Apache Software Foundation karaf vulnerabilities are there?

Apache Software Foundation karaf has 2 critical and 5 high-severity CVEs.

What is the average severity of Apache Software Foundation karaf CVEs?

The average CVSS base score across Apache Software Foundation karaf's scored CVEs is 7.3.

Apache Software Foundation karaf Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every Apache Software Foundation karaf version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

karaf-3.0.011 CVEs
karaf-4.0.0.M111 CVEs
karaf-4.0.0.M211 CVEs
karaf-4.0.111 CVEs
karaf-4.0.211 CVEs
karaf-4.0.311 CVEs
karaf-4.0.411 CVEs
karaf-4.1.010 CVEs
karaf-4.1.19 CVEs
karaf-4.2.0.M19 CVEs
karaf-4.2.0.M29 CVEs
karaf-4.2.08 CVEs
karaf-4.2.18 CVEs
karaf-4.2.27 CVEs
karaf-4.2.36 CVEs
karaf-4.3.04 CVEs
karaf-4.3.14 CVEs
karaf-4.3.24 CVEs
karaf-4.2.43 CVEs
karaf-4.3.0.RC13 CVEs
karaf-4.3.33 CVEs
karaf-4.3.43 CVEs
karaf-4.3.53 CVEs
karaf-4.0.52 CVEs
karaf-4.0.62 CVEs
karaf-4.0.72 CVEs
karaf-4.2.52 CVEs
karaf-4.2.62 CVEs
karaf-4.2.72 CVEs
karaf-4.2.82 CVEs
karaf-3.0.11 CVE
karaf-3.0.21 CVE
karaf-3.0.31 CVE
karaf-3.0.41 CVE
karaf-3.0.51 CVE
karaf-3.0.61 CVE
karaf-3.0.71 CVE
karaf-3.0.81 CVE
karaf-4.0.0.M31 CVE
karaf-4.0.81 CVE
karaf-4.1.21 CVE
karaf-4.1.31 CVE
karaf-4.1.41 CVE
karaf-4.1.51 CVE
karaf-4.1.61 CVE
karaf-4.2.101 CVE
karaf-4.2.111 CVE
karaf-4.2.121 CVE
karaf-4.2.131 CVE
karaf-4.2.141 CVE
karaf-4.2.91 CVE
karaf-4.3.61 CVE
karaf-4.3.71 CVE
karaf-4.4.01 CVE
karaf-4.4.11 CVE
r1rv491 CVE
r1rv501 CVE
r1rv511 CVE
r1rv521 CVE
r1rv531 CVE
r1rv541 CVE
r1rv551 CVE
r1rv561 CVE
r1rv571 CVE
r1rv581 CVE
r1rv591 CVE
r1rv601 CVE
r1rv611 CVE
r1rv621 CVE
r1rv631 CVE
r1rv641 CVE
r1rv651 CVE
r1rv661 CVE
r1v601 CVE

Version ranges

< 21.1.21 CVE
< 3.0.91 CVE
< 4.0.101 CVE
< 4.0.81 CVE
< 4.1.71 CVE
< 4.2.01 CVE
< 4.2.151 CVE
< 4.2.31 CVE
< 4.2.51 CVE
< 4.2.91 CVE
< 4.3.61 CVE
< 4.3.81 CVE
<= 1.2.11 CVE
<= 11.1.1.9.01 CVE

Fixed in

4.3.62 CVEs
fa2562d583197ad41785a451144d58b1482998582 CVEs
10b09eaf4da33dfea335fdd77a2ac96376b6e17a1 CVE
21.1.21 CVE
27c8ec4d55208ef58de2698cd89580d8b3478d551 CVE
2b609475dab4e504d5136ecc1f506b4365f9a1111 CVE
2e73d43b80ae69e748b106fdb4cc301a9856f3061 CVE
3.0.91 CVE
4.0.101 CVE
4.0.81 CVE
4.0.91 CVE
4.1.11 CVE
4.1.7

Find a version

13 CVEs

Sort

Critical vulnerability · 2022-12-21
CVE-2022-40145
Patch
CWE-74
Critical · CVSS 9.8
EPSS 2.4% (82th pct)2022-12-21
Medium vulnerability · 2022-01-26
CVE-2022-22932
Patch
Workaround
Medium · CVSS 5.3
EPSS 2.8% (85th pct)2022-01-26
High vulnerability · 2022-01-26
CVE-2021-41766
Patch
Workaround
High · CVSS 8.1
EPSS 2.0% (79th pct)2022-01-26
High vulnerability · 2020-12-18
CVE-2020-28052
Patch
High · CVSS 8.1
EPSS 7.1% (94th pct)2020-12-18
Medium vulnerability · 2020-06-12
CVE-2020-11980
Patch
Medium · CVSS 6.3
EPSS 1.9% (77th pct)2020-06-12
Medium vulnerability · 2019-05-09
CVE-2019-0226
Patch
Medium · CVSS 4.9
EPSS 1.8% (76th pct)2019-05-09
Medium vulnerability · 2019-03-20
CVE-2019-0191
Patch
Medium · CVSS 6.5
EPSS 4.9% (91th pct)2019-03-20
Critical vulnerability · 2019-01-07
CVE-2018-11788
Patch
Critical · CVSS 9.8
EPSS 7.5% (94th pct)2019-01-07
High vulnerability · 2018-09-18
CVE-2018-11787
Patch
High · CVSS 8.1
EPSS 2.6% (83th pct)2018-09-18
High vulnerability · 2018-09-18
CVE-2018-11786
Patch
High · CVSS 8.8
EPSS 1.9% (77th pct)2018-09-18
High vulnerability · 2018-08-01
CVE-2016-8648CWE-502
High · CVSS 7.2
EPSS 2.0% (78th pct)2018-08-01
Medium vulnerability · 2018-02-19
CVE-2016-8750
Patch
Medium · CVSS 6.5
EPSS 5.3% (92th pct)2018-02-19
Medium vulnerability · 2017-11-15
CVE-2014-0219
Patch
Medium · CVSS 5.5
EPSS 0.7% (49th pct)2017-11-15

Apache Software Foundation karaf Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other Apache Software Foundation products

Frequently asked questions

References

Track Apache Software Foundation karaf vulnerabilities