apache artemis

Name: apache artemis
Brand: apache

productUS

cpe:2.3:a:apache:artemis:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical6high8medium0low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-50780US	high8.8	17.5% (97th)	Exploit	2.29.0	2024-10-14	< 2.29.0
CVE-2026-57967US	—OT elevated	1.47% (74th)	Exploit	2.44.0	2026-09-10	2 versions
CVE-2021-26117US	high7.5	11.3% (96th)	—	2.16.0	2021-01-27	< 2.16.0
CVE-2026-27446US	critical9.8OT elevated	10.6% (96th)	—	no fix	2026-03-04	2 versions
CVE-2016-4978US	high7.2	6.88% (94th)	—	1.4.0	2016-09-27	< 1.4.0
CVE-2017-12174US	high7.5	5.98% (93rd)	—	2.4.0	2018-03-07	< 2.4.0
CVE-2020-13932US	medium6.1	4.35% (91st)	—	no fix	2020-07-20	2.5.0 → 2.13.0
CVE-2021-26118US	high7.5	3.86% (90th)	—	no fix	2021-01-27	= 2.15.0
CVE-2021-4040US	medium5.3	3.19% (88th)	—	2.19.1	2022-08-24	< 2.19.1
CVE-2022-23913US	high7.5	2.74% (86th)	—	2.19.1	2022-02-04	< 2.19.1
CVE-2022-35278US	medium6.1	1.75% (78th)	—	2.24.0	2022-08-23	< 2.24.0
CVE-2026-67593US	—OT elevated	0.86% (58th)	—	2.44.0	2026-09-10	2 versions
CVE-2026-49362US	—OT elevated	0.82% (57th)	—	2.44.0	2026-09-10	2 versions
CVE-2026-49363US	—OT elevated	0.80% (57th)	—	2.44.0	2026-09-10	2 versions
CVE-2026-57822US	—	0.70% (53rd)	—	2.44.0	2026-09-10	2 versions
CVE-2020-10727US	medium5.5OT elevated	0.70% (53rd)	—	no fix	2020-06-26	2.7.0 → 2.12.0
CVE-2025-27427US	medium4.3OT elevated	0.65% (51st)	—	2.40.0	2025-04-01	2.0.0 → 2.40.0
CVE-2026-75880US	—	0.65% (51st)	—	2.44.0	2026-09-10	2 versions
CVE-2026-49364US	—OT elevated	0.57% (47th)	—	2.57.0	2026-09-10	2 versions
CVE-2025-27391US	medium6.5	0.43% (38th)	—	2.40.0	2025-04-09	1.5.1 → 2.40.0
CVE-2026-32642US	medium4.3OT elevated	0.43% (37th)	—	2.53.0	2026-03-24	2 versions
CVE-2026-40914US	medium4.3OT elevated	0.37% (31st)	—	2.54.0	2026-05-28	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-306Missing Authentication for Critical Function6 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-284Improper Access Control1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan