Vulnerabilities of Apache Software Foundation Apache Storm UI
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-82433 | Description `getNimbusConf` returned the complete daemon configuration without redaction after only a user-level… | Not rated | Sep 14, 2026 |
| CVE-2026-84179 | Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration and… | Not rated | Sep 14, 2026 |
| CVE-2026-35565 | Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6… | Not rated | Apr 13, 2026 |