Product by Apache Software Foundation

    Apache Software Foundation Roller

    14 known vulnerabilities in Apache Software Foundation Roller (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Apache Software Foundation Roller (Apache Software Foundation)
    SeverityCVETitleCVSSPublished
    CriticalCVE-2014-0030

    Apache Software Foundation Roller: XML External Entity (XXE)

    		9.8
    CriticalCVE-2018-17198

    Apache Roller: Server-Side Request Forgery (SSRF)

    		9.8
    HighCVE-2015-0249

    Apache Software Foundation Roller: security vulnerability

    		7.2
    HighCVE-2021-33580

    regex injection leading to DoS

    		7.5
    MediumCVE-2019-0234

    Apache Roller: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2025-24859

    Apache Roller: Insufficient Session Expiration on Password Change

    		8.8
    Not ratedCVE-2013-4212

    Apache Software Foundation Roller: security vulnerability

    		—
    Not ratedCVE-2008-6879

    Apache Software Foundation Roller: Cross-Site Scripting (XSS)

    		—
    MediumCVE-2023-37581

    Apache Roller: Cross-site Scripting

    		5.4
    Not ratedCVE-2013-4171

    Apache Software Foundation Roller: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2012-2381

    Apache Software Foundation Roller: Cross-Site Scripting (XSS)

    		—
    MediumCVE-2024-25090

    Apache Roller: Cross-site Scripting

    		5.4
    Not ratedCVE-2012-2380

    Apache Software Foundation Roller: Cross-Site Request Forgery (CSRF)

    		—
    MediumCVE-2024-46911

    Apache Roller: Weakness in CSRF protection allows privilege escalation

    		4.7

    All products by Apache Software Foundation