Apache Software Foundation Apache Answer vulnerabilities
37 published CVEs name Apache Software Foundation Apache Answer among the affected products.
- 37Published CVEs37 of them scored
- 27Last 12 monthspublished in the last year
- 4Critical9 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-90910
Apache Answer: Reaction API authorization bypass for restricted content
Apache Software Foundation · Apache Answer
Critical9.8 - CVE-2026-86589
Apache Answer: User Center integration does not revoke first-login sessions after central account suspension
Apache Software Foundation · Apache Answer
Medium5.4 - CVE-2026-79633
Apache Answer: Missing Authorization Allows Mutations of Non-Public Content
Apache Software Foundation · Apache Answer
High8.1 - CVE-2026-79624
Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session Revocation
Apache Software Foundation · Apache Answer
Critical9.8 - CVE-2026-79620
Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question Metadata
Apache Software Foundation · Apache Answer
Medium4.3 - CVE-2026-79613
Apache Answer: Disclosure of Comments on Non-Public Content Through Public Profiles
Apache Software Foundation · Apache Answer
Medium5.3 - CVE-2026-76994
Apache Answer: Exposure of Hidden Question Metadata Through Public Answer Profiles
Apache Software Foundation · Apache Answer
High7.5 - CVE-2026-71563
Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions
Apache Software Foundation · Apache Answer
Medium4.3 - CVE-2026-68482
Apache Answer: Improper Authorization in Question Invite User Lookup
Apache Software Foundation · Apache Answer
Medium5.3 - CVE-2026-67249
Apache Answer: Email Code Purpose Confusion May Allow Account Takeover
Apache Software Foundation · Apache Answer
Medium5.4