The Apache Software Foundation - vulnerabilities (CVEs)

2 CVEs in 2 products, 0 in the last 30 days, newest from 2020-04-27.

Products

• Apache Pony Mail Incubating - 1 CVEs
• Apache Tika - 1 CVEs

Newest CVEs of The Apache Software Foundation

• CVE-2020-9489 - CVSS 5.5 (medium), 2020-04-27: A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or…
• CVE-2019-0218 - CVSS 6.1 (medium), 2019-04-22: A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface.