Apache vulnerabilities

3,483 CVEs affecting Apache products, 46 known to be exploited (CISA KEV), with EPSS scores. Most affected: HTTP Server, Tomcat, Airflow, Traffic Server, Struts.