Apache Atlas (Apache Software Foundation) - vulnerabilities (CVEs)
12 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-07-29. Vendor: Apache Software Foundation.
CVEs of Apache Atlas
- CVE-2026-50622 - CVSS 8.8 (high), 2026-07-29: Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user,…
- CVE-2025-62198 - CVSS 5.4 (medium), 2026-06-22: An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which…
- CVE-2026-40563 - CVSS 8.1 (high), 2026-05-04: Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts…
- CVE-2024-46910 - CVSS 7.1 (high), 2025-02-13: An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 and earlier. Users are…
- CVE-2022-34271 - CVSS 8.8 (high), 2022-12-14: A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from…
- CVE-2017-3151 - CVSS 6.1 (medium), 2017-08-29: Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality.
- CVE-2017-3154 - CVSS 7.5 (high), 2017-08-29: Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.
- CVE-2017-3150 - CVSS 6.1 (medium), 2017-08-29: Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.
- CVE-2017-3153 - CVSS 6.1 (medium), 2017-08-29: Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.
- CVE-2016-8752 - CVSS 7.5 (high), 2017-08-29: Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like…
- CVE-2017-3152 - CVSS 6.1 (medium), 2017-08-29: Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality.
- CVE-2017-3155 - CVSS 6.1 (medium), 2017-08-29: Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting.
