a
apache software foundation
Security Risk Profile
74
/100
highSecurity Risk Score
Comprehensive risk assessment based on 404 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 1, 1998 to present
404
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
8.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
74/100
high
🆕 1Fresh (<7d)📈 6 in Last 30 Days
Severity Distribution
Critical
2High
0Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
1
2
Input Validation
1
Most Affected Products
1. Apache Software Foundation Camel81
2. Apache Software Foundation ActiveMQ46
3. Apache Software Foundation Spark40
4. Apache Software Foundation Hadoop35
5. Apache Software Foundation Kafka31
Recent Vulnerabilities
See more →EOL-apache-airflow-3.4
unknown
Nov 7, 2026
EOL-apache-hop-2.20
unknown
Nov 2, 2026
EOL-apache-spark-4.3
unknown
Oct 30, 2026
theregister-5305515
unknown
Microsoft releases emergency .NET security fixes for Google Brotli bug
Oct 26, 2026🔧 No Patch
EOL-apache-activemq-6.4
unknown
Oct 22, 2026
EOL-apache-kafka-4.4
unknown
Oct 13, 2026
EOL-apache-groovy-6.0
unknown
Sep 19, 2026
EOL-apache-hop-2.19
unknown
Aug 17, 2026
EOL-apache-groovy-5.1
unknown
Aug 15, 2026
EOL-apache-camel-4.22
unknown
Aug 11, 2026
Monitor apache software foundation in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.