Skip to content

Vulnerabilities of Apache Software Foundation Apache Storm

Is your version affected?

CVE Summary Score Published
CVE-2023-43123 On unix-like systems, the temporary directory is shared between all user Not rated Nov 23, 2023
CVE-2021-40865 An Unsafe Deserialization vulnerability exists in the worker services of the Apache Storm supervisor server allowing… Not rated Oct 25, 2021
CVE-2021-38294 A Command Injection vulnerability exists in the getTopologyHistory service of the Apache Storm 2.x prior to 2.2.1 and… Not rated Oct 25, 2021
CVE-2018-1331 In Apache Storm 0.10.0 through 0.10.2, 1.0.0 through 1.0.6, 1.1.0 through 1.1.2, and 1.2.0 through 1.2.1, an attacker… Not rated Jul 10, 2018
CVE-2018-8008 Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file… Not rated Jun 5, 2018
CVE-2018-1332 Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that… Not rated Jun 5, 2018
CVE-2017-9799 It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it… Not rated Aug 9, 2017

Other Apache Software Foundation products