Skip to content

Vulnerabilities of Apache Software Foundation Apache Atlas

Is your version affected?

CVE Summary Score Published
CVE-2026-50622 Description: Missing Authorization in Apache Atlas Not rated Jul 29, 2026
CVE-2025-62198 An authenticated user can perform XSS Not rated Jun 22, 2026
CVE-2026-40563 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas… Not rated May 4, 2026
CVE-2024-46910 An authenticated user can perform XSS and potentially impersonate another user Not rated Feb 13, 2025
CVE-2022-34271 A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem Not rated Dec 14, 2022
CVE-2017-3151 Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in… Not rated Aug 29, 2017
CVE-2017-3150 Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script Not rated Aug 29, 2017
CVE-2017-3155 Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting Not rated Aug 29, 2017
CVE-2017-3154 Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing… Not rated Aug 29, 2017
CVE-2017-3153 Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search… Not rated Aug 29, 2017
CVE-2017-3152 Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag… Not rated Aug 29, 2017
CVE-2016-8752 Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp… Not rated Aug 29, 2017

Other Apache Software Foundation products