Login Request a demo
AT
Product
Atlas
by Apache · last CVE Jul 29, 2026
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 6Medium 9Low 0
Severity
All severities15Critical0High6Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Atlas to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50622
8.8
1%
Jul 29
Apache Atlas: Missing Authorization on Admin Endpoints
Affected: 0.8.0 before 2.6.0
CVE-2022-34271
8.8
1%
Dec 14
A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem
Affected: 0.8.4 through 2.2.0
CVE-2026-40563
8.1
0%
May 4
Apache Atlas: Script injection allows access to unintended data
Affected: 0.8 before 2.5.0
CVE-2017-3154
7.5
2%
Aug 29
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information
Affected: 0.6.0; 0.6.0; 0.6.0; 0.7.0; 0.7.0; 0.7.0
CVE-2016-8752
7.5
2%
Aug 29
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img
Affected: 0.6.0; 0.6.0; 0.6.0; 0.7.0; 0.7.0; 0.7.0; +4 more
CVE-2024-46910
7.1
1%
Feb 13
An authenticated user can perform XSS and potentially impersonate another user
Affected: 2.0.0 before 2.4.0
CVE-2020-13928
6.1
3%
Sep 16
Apache Atlas before 2.1.0 contain a XSS vulnerability
Affected: before 2.1.0
CVE-2019-10070
6.1
2%
Nov 18
Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality
Affected: 0.8.3; 1.1.0
CVE-2017-3155
6.1
2%
Aug 29
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting
Affected: 0.6.0; 0.6.0; 0.6.0; 0.7.0; 0.7.0; 0.7.0
CVE-2017-3153
6.1
2%
Aug 29
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality
Affected: 0.6.0; 0.6.0; 0.6.0; 0.7.0; 0.7.0; 0.7.0
CVE-2017-3152
6.1
2%
Aug 29
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality
Affected: 0.6.0; 0.6.0; 0.6.0; 0.7.0; 0.7.0; 0.7.0
CVE-2017-3151
6.1
2%
Aug 29
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality
Affected: 0.6.0; 0.6.0; 0.6.0; 0.7.0; 0.7.0; 0.7.0
CVE-2017-3150
6.1
2%
Aug 29
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script
Affected: 0.6.0; 0.6.0; 0.6.0; 0.7.0; 0.7.0; 0.7.0
CVE-2020-17521
5.5
1%
Dec 7
Apache Groovy provides extension methods to aid with creating temporary directories
Affected: 2.1.0
CVE-2025-62198
5.4
1%
Jun 22
Apache Atlas: Stored XSS in Create Entity page
Affected: before 2.5.0
Showing 15