apache tika

Name: apache tika
Brand: apache

productUS

cpe:2.3:a:apache:tika:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical8high14medium1low

updated 2026-10-27

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-1335US	high8.1	93.6% (100th)	Exploit	1.18	2018-04-25	< 1.18
CVE-2025-66516US	critical9.8	89.0% (100th)	Exploit	3.2.2	2025-12-04	1.13 → 3.2.2
CVE-2025-54988US	—	47.9% (99th)	Exploit	3.2.2	2025-08-20	1.13 → 3.2.2
CVE-2018-11761US	high7.5	9.38% (95th)	Exploit	no fix	2018-09-19	0.1 → 1.18
CVE-2021-33813US	high7.5	19.4% (97th)	—	no fix	2021-06-16	= 1.25
CVE-2016-6809US	critical9.8	8.03% (95th)	—	no fix	2017-04-06	≤ 1.13
CVE-2018-11796US	high7.5	7.54% (94th)	—	no fix	2018-10-09	0.1 → 1.19
CVE-2015-3271US	medium5.3	6.52% (94th)	—	no fix	2016-12-15	= 1.9
CVE-2018-17197US	medium6.5	6.15% (93rd)	—	no fix	2018-12-24	1.8 → 1.19.1
CVE-2018-11762US	medium5.9	5.45% (93rd)	—	no fix	2018-09-19	0.9 → 1.18
CVE-2019-10088US	high8.8	4.84% (92nd)	—	no fix	2019-08-02	1.7 → 1.21
CVE-2019-10093US	medium6.5	3.70% (90th)	—	no fix	2019-08-02	1.19 → 1.21
CVE-2016-4434US	high7.8	3.57% (89th)	—	no fix	2017-09-30	= 1.12
CVE-2020-1950US	medium5.5	2.99% (87th)	—	no fix	2020-03-23	1.0 → 1.23
CVE-2020-1951US	medium5.5	2.89% (87th)	—	no fix	2020-03-23	1.0 → 1.23
CVE-2021-28657US	medium5.5	2.74% (86th)	—	no fix	2021-03-31	≤ 1.25
CVE-2020-9489US	medium5.5	2.71% (86th)	—	no fix	2020-04-27	= 1.24
CVE-2022-30126US	medium5.5	2.60% (85th)	—	2.4.0	2022-05-16	2 versions
CVE-2018-1339US	medium5.5	2.56% (85th)	—	1.18	2018-04-25	< 1.18
CVE-2019-10094US	high7.8	2.46% (84th)	—	no fix	2019-08-02	1.7 → 1.21
CVE-2018-8017US	medium5.5	2.28% (83rd)	—	no fix	2018-09-19	1.2 → 1.18
CVE-2022-25169US	medium5.5	2.20% (82nd)	—	1.28.2	2022-05-16	2 versions
CVE-2022-33879US	low3.3	2.03% (81st)	—	2.4.1	2022-06-27	2 versions
CVE-2022-30973US	medium5.5	1.98% (80th)	—	1.28.3	2022-05-31	< 1.28.3
CVE-2018-1338US	medium5.5	1.92% (80th)	—	1.18	2018-04-25	< 1.18
CVE-2026-66756US	critical9.8	0.75% (55th)	—	no fix	2026-07-30	= 4.0.0
CVE-2026-66755US	high7.5	0.63% (50th)	—	3.3.2	2026-07-30	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')7 CVEs
CWE-611Improper Restriction of XML External Entity Reference6 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-1333Inefficient Regular Expression Complexity2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan