Apache Software Foundation vulnerabilities

242 CVEs affecting Apache Software Foundation products, 0 known to be exploited (CISA KEV), with EPSS scores. Most affected: Apache Thrift, Apache Syncope, Apache Roller, Apache Dolphinscheduler, Apache Tomcat.

• Apache Thrift: 61 CVEs
• Apache Syncope: 22 CVEs
• Apache Roller: 18 CVEs
• Apache Dolphinscheduler: 13 CVEs
• Apache Tomcat: 12 CVEs
• Apache Cxf: 11 CVEs
• Apache Iotdb: 10 CVEs
• Apache Mina Sshd: 8 CVEs
• Apache APISIX: 7 CVEs
• Apache Storm Nimbus: 7 CVEs