Apache · weakness class
Insecure Direct Object Reference
28 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.
- IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04
- Apache ZooKeeper: Authorization bypass in SASL Quorum Peer Authentication
- Apache InLong: Jdbc Connection Security Bypass in InLong
- Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled key
- Apache StreamPark IDOR Vulnerability
- Apache Camel Lucene: The query control headers used non-Camel-prefixed names (QUERY, RETURN_LUCENE_DOCS) that bypass the HTTP header filter, allowing an HTTP client to inject the…
- Apache Vysper: Authorization bypass
- Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}
- Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or Variable
- Apache Camel JIRA: A set of non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to drive arbitrary JIRA issue operations using the…
- Apache Camel: Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clients to override the…
- Apache Camel Salesforce: Non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to influence internal behaviour
- Apache Camel K: Camel K Builder trait mavenProfiles ValueSources resolve tenant-named secrets in operator namespace
- Apache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutation
- Apache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL
- Apache OFBiz: Authorization Bypass Through User-Controlled Key in Content Viewing Enables Unauthorized Content Disclosure
- Apache OFBiz: Authorization Bypass Through User-Controlled Key in Shopping Lists Enables Cross-Party Shopping List Modification
- Apache OFBiz: Authorization Bypass Through User-Controlled Key in Order Returns Enables Cross-Party OrderItem Association
- Apache OFBiz: Authorization Bypass Through User-Controlled Key in OrderServices Enables Unauthorized Payment Preference Modification
- Apache Syncope: Delegated administration boundaries can be bypassed for Realm update
- Apache Fineract: IDOR via self-service API
- Apache Airflow HashiCorp provider: HashiCorp Vault secrets backend: team-scope guard bypass via user-controlled key
- Apache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filter
- Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable
- Apache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or Variable
- Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.