How many Apache Software Foundation ozone CVEs are in CISA KEV?

None of Apache Software Foundation ozone's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Apache Software Foundation ozone are affected?

14 distinct Apache Software Foundation ozone versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Apache Software Foundation ozone CVEs?

Apache Software Foundation ozone's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-287 (Improper Authentication), CWE-273 (Improper Check for Dropped Privileges), CWE-285 (Improper Authorization).

How many critical Apache Software Foundation ozone vulnerabilities are there?

Apache Software Foundation ozone has 3 critical and 4 high-severity CVEs.

What is the average severity of Apache Software Foundation ozone CVEs?

The average CVSS base score across Apache Software Foundation ozone's scored CVEs is 7.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Apache Software Foundation

11 CVEs

Apache Software Foundation ozone Vulnerabilities

Name: Apache Software Foundation ozone vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ozone by Apache Software Foundation.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.8

Avg CVSS

2021–2024

Last updated December 3, 2024

Overview

Apache Software Foundation ozone has 11 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Apache Software Foundation ozone, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Apache Software Foundation ozone's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical3

High4

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Apache Software Foundation ozone's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Apache Software Foundation ozone CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Apache Software Foundation ozone version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

ozone-1.2.0-RC08 CVEs
ozone-1.1.0-RC11 CVE
ozone-1.4.01 CVE
ozone-1.4.0-RC01 CVE
ozone-1.4.0-RC11 CVE

Version ranges

< 1.2.08 CVEs
< 1.1.01 CVE
>= 1.4.01 CVE
1.2.0 <= v <= 1.3.01 CVE
1.4.0 <= v <= 1.4.01 CVE

Fixed in

1.2.08 CVEs
9ee6f1872dca8469057d3c7bf880931c0e7b7f3e8 CVEs
1.1.01 CVE
f2406c4b4eb2b1295d06ec379cfe684ed9a166371 CVE

Find a version

11 CVEs

Sort

High vulnerability · 2024-12-03
CVE-2024-45106
Patch
CWE-287
High · CVSS 8.6
EPSS 0.6% (43th pct)2024-12-03
Apache Ozone: Missing mutual TLS authentication in one of the service internal Ozone Storage Container Manager endpoints
CVE-2023-39196
Patch
CWE-287
Medium · CVSS 5.3
EPSS 0.8% (53th pct)2024-02-07
Medium vulnerability · 2021-11-19
CVE-2021-41532
Patch
Workaround
CWE-200
Medium · CVSS 5.3
EPSS 2.3% (82th pct)2021-11-19
High vulnerability · 2021-11-19
CVE-2021-39236
Patch
Workaround
CWE-862
High · CVSS 8.8
EPSS 2.5% (83th pct)2021-11-19
Medium vulnerability · 2021-11-19
CVE-2021-39235
Patch
Workaround
CWE-732
Medium · CVSS 6.5
EPSS 1.5% (72th pct)2021-11-19
Medium vulnerability · 2021-11-19
CVE-2021-39234
Patch
Workaround
CWE-20
Medium · CVSS 6.8
EPSS 1.4% (69th pct)2021-11-19
Critical vulnerability · 2021-11-19
CVE-2021-39233
Patch
Workaround
CWE-306
Critical · CVSS 9.1
EPSS 2.3% (81th pct)2021-11-19
Missing admin check for SCM related admin commands
CVE-2021-39232
Patch
Workaround
CWE-862
High · CVSS 8.8
EPSS 1.6% (74th pct)2021-11-19
Critical vulnerability · 2021-11-19
CVE-2021-39231
Patch
Workaround
CWE-862
Critical · CVSS 9.1
EPSS 2.3% (81th pct)2021-11-19
Critical vulnerability · 2021-11-19
CVE-2021-36372
Patch
Workaround
CWE-273
Critical · CVSS 9.8
EPSS 2.4% (83th pct)2021-11-19
High vulnerability · 2021-04-27
CVE-2020-17517
Patch
Workaround
CWE-285
High · CVSS 7.5
EPSS 2.3% (81th pct)2021-04-27

Common weakness types

The CWE weakness categories most often found in Apache Software Foundation ozone CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Apache Software Foundation ozone CVEs were published each year.

2021

9

2024

2

Other Apache Software Foundation products

Browse vulnerabilities for other products by Apache Software Foundation.

http server351 CVEs tomcat265 CVEs airflow183 CVEs Apache Airflow136 CVEs apache-airflow127 CVEs Apache HTTP Server125 CVEs httpd125 CVEs org.apache.tomcat:tomcat118 CVEs

All Apache Software Foundation vulnerabilities

Frequently asked questions

Common questions about Apache Software Foundation ozone vulnerabilities.

How many CVEs does Apache Software Foundation ozone have?: Apache Software Foundation ozone has 11 published CVE records since 2021.
How many Apache Software Foundation ozone CVEs are in CISA KEV?: None of Apache Software Foundation ozone's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Apache Software Foundation ozone vulnerabilities?: No Apache Software Foundation ozone CVEs currently have a tracked public exploit in this dataset.
Which versions of Apache Software Foundation ozone are affected?: 14 distinct Apache Software Foundation ozone versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Apache Software Foundation ozone CVEs?: Apache Software Foundation ozone's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-287 (Improper Authentication), CWE-273 (Improper Check for Dropped Privileges), CWE-285 (Improper Authorization).
How many critical Apache Software Foundation ozone vulnerabilities are there?: Apache Software Foundation ozone has 3 critical and 4 high-severity CVEs.
What is the average severity of Apache Software Foundation ozone CVEs?: The average CVSS base score across Apache Software Foundation ozone's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Apache Software Foundation ozone vulnerabilities

Monitor new Apache Software Foundation ozone vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing