Known vulnerabilities in Answer

Vendor: Apache Foundation
Software: Answer
Software CPE: cpe:2.3:a:apache_foundation:answer:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Answer Answer is affected by 10 known vulnerabilities: 1 high, 4 medium, 5 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106968 - Exposure of sensitive information to an unauthorized actor
CVE-2025-29868		 CWE-200 Low
No
No
 1.4.5 03.04.2025 SB2025040398
#VU100905 - Generation of Incorrect Security Tokens
CVE-2024-45719		 CWE-1270 High
No
No
 1.4.1 25.11.2024 SB2024112529
#VU97713 - Inadequate Encryption Strength
CVE-2024-40761		 CWE-326 Low
No
No
 1.4.0 26.09.2024 SB2024092605
#VU96230 - Missing Release of Resource after Effective Lifetime
CVE-2024-41888		 CWE-772 Medium
No
No
 1.3.6 20.08.2024 SB2024082010
#VU96229 - Missing Release of Resource after Effective Lifetime
CVE-2024-41890		 CWE-772 Medium
No
No
 1.3.6 20.08.2024 SB2024082010
#VU88864 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-29217		 CWE-79 Low
No
No
 1.3.0 22.04.2024 SB2024042207
#VU87301 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-26578		 CWE-362 Low
No
No
 1.2.5 08.03.2024 SB2024030831
#VU87299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23349		 CWE-79 Medium
No
No
 1.2.5 08.03.2024 SB2024030831
#VU87298 - Resource Management Errors
CVE-2024-22393		 CWE-399 Medium
Available
No
 1.2.5 08.03.2024 SB2024030831
#VU85788 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-49619		 CWE-362 Low
No
No
 1.2.1 25.01.2024 SB2024012509