Known vulnerabilities in Apache Answer - page 2

Vendor: Apache Foundation
Software: Apache Answer
Software CPE: cpe:2.3:a:apache_foundation:answer:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 36
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Answer Apache Answer is affected by 36 known vulnerabilities: 3 high, 12 medium, 21 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU157279 - Missing Authentication for Critical Function
CVE-2026-90910		 CWE-306 Medium
No
No
 2.0.3 23.10.2026 SB2026102307
#VU157278 - Incorrect Implementation of Authentication Algorithm
CVE-2026-86589		 CWE-303 Low
No
No
 2.0.3 23.10.2026 SB2026102307
#VU157277 - Missing Authorization
CVE-2026-79633		 CWE-862 Low
No
No
 2.0.3 22.10.2026 SB2026102307
#VU157276 - Insufficient Session Expiration
CVE-2026-79624		 CWE-613 Low
No
No
 2.0.3 22.10.2026 SB2026102307
#VU157275 - Incorrect Authorization
CVE-2026-79620		 CWE-863 Low
No
No
 2.0.3 22.10.2026 SB2026102307
#VU157274 - Incorrect Authorization
CVE-2026-79613		 CWE-863 Medium
No
No
 2.0.3 22.10.2026 SB2026102307
#VU157273 - Exposure of sensitive information to an unauthorized actor
CVE-2026-76994		 CWE-200 Medium
No
No
 2.0.3 22.10.2026 SB2026102307
#VU157272 - Missing Authorization
CVE-2026-71563		 CWE-862 Low
No
No
 2.0.3 22.10.2026 SB2026102307
#VU157271 - Missing Authorization
CVE-2026-68482		 CWE-862 Medium
No
No
 2.0.3 22.10.2026 SB2026102307
#VU157270 - Improper Authentication
CVE-2026-67249		 CWE-287 High
No
No
 2.0.3 22.10.2026 SB2026102307
#VU157269 - Incorrect Authorization
CVE-2026-64945		 CWE-863 Low
No
No
 2.0.3 22.10.2026 SB2026102307
#VU157268 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-64944		 CWE-79 Medium
No
No
 2.0.3 22.10.2026 SB2026102307
#VU157267 - Information Exposure Through Log Files
CVE-2026-64943		 CWE-532 Low
No
No
 2.0.3 22.10.2026 SB2026102307
#VU87299 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-23349		 CWE-79 Medium
No
No
 1.2.5 08.03.2024 SB2024030831
#VU87298 - Resource Management Errors
CVE-2024-22393		 CWE-399 Medium
Available
No
 1.2.5 08.03.2024 SB2024030831
#VU85788 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2023-49619		 CWE-362 Low
No
No
 1.2.1 25.01.2024 SB2024012509


Showing elements 21 - 40 out of 36