Known vulnerabilities in Apache Answer

Vendor: Apache Foundation
Software: Apache Answer
Software CPE: cpe:2.3:a:apache_foundation:answer:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 36
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Answer Apache Answer is affected by 36 known vulnerabilities: 3 high, 12 medium, 21 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145219 - Incorrect Privilege Assignment
CVE-2026-25700		 CWE-266 Low
No
No
 2.0.1 25.08.2026 SB2026082571
#VU145218 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-25688		 CWE-79 Medium
No
No
 2.0.1 25.08.2026 SB2026082571
#VU145217 - Improper Access Control
CVE-2026-25699		 CWE-284 Low
No
No
 2.0.1 25.08.2026 SB2026082571
#VU145216 - Uncontrolled Memory Allocation
CVE-2026-33582		 CWE-789 Low
No
No
 2.0.1 25.08.2026 SB2026082571
#VU145215 - Improper input validation
CVE-2026-34031		 CWE-20 Low
No
No
 2.0.1 25.08.2026 SB2026082571
#VU145214 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-34033		 CWE-79 Low
No
No
 2.0.1 25.08.2026 SB2026082571
#VU145213 - Improper Access Control
CVE-2026-34905		 CWE-284 Low
No
No
 2.0.1 25.08.2026 SB2026082571
#VU144925 - Insufficient Session Expiration
CVE-2026-60053		 CWE-613 Low
No
No
 2.0.2 24.08.2026 SB20260824199
#VU144924 - Improper Access Control
CVE-2026-60023		 CWE-284 Medium
No
No
 2.0.2 24.08.2026 SB20260824199
#VU144923 - Improper Authorization
CVE-2026-50749		 CWE-285 Low
No
No
 2.0.2 24.08.2026 SB20260824199
#VU144922 - Improper Access Control
CVE-2026-48912		 CWE-284 Low
No
No
 2.0.2 24.08.2026 SB20260824199
#VU144921 - Insufficient Verification of Data Authenticity
CVE-2026-48911		 CWE-345 High
No
No
 2.0.2 24.08.2026 SB20260824199
#VU144919 - Improper Handling of Length Parameter Inconsistency
CVE-2026-48834		 CWE-130 Medium
No
No
 2.0.2 24.08.2026 SB20260824199
#VU106968 - Exposure of sensitive information to an unauthorized actor
CVE-2025-29868		 CWE-200 Low
No
No
 1.4.5 03.04.2025 SB2025040398
#VU100905 - Generation of Incorrect Security Tokens
CVE-2024-45719		 CWE-1270 High
No
No
 1.4.1 25.11.2024 SB2024112529
#VU97713 - Inadequate Encryption Strength
CVE-2024-40761		 CWE-326 Low
No
No
 1.4.0 26.09.2024 SB2024092605
#VU96230 - Missing Release of Resource after Effective Lifetime
CVE-2024-41888		 CWE-772 Medium
No
No
 1.3.6 20.08.2024 SB2024082010
#VU96229 - Missing Release of Resource after Effective Lifetime
CVE-2024-41890		 CWE-772 Medium
No
No
 1.3.6 20.08.2024 SB2024082010
#VU88864 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29217		 CWE-79 Low
No
No
 1.3.0 22.04.2024 SB2024042207
#VU87301 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-26578		 CWE-362 Low
No
No
 1.2.5 08.03.2024 SB2024030831


Showing elements 1 - 20 out of 36