AT
Product
Atlas
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 9Low 0
Watch
Add Atlas to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-50622 | 8.8 | Jul 29 | Apache Atlas: Missing Authorization on Admin Endpoints Affected: 0.8.0 before 2.6.0 |
| CVE-2022-34271 | 8.8 | Dec 14 | A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem Affected: 0.8.4 through 2.2.0 |
| CVE-2026-40563 | 8.1 | May 4 | Apache Atlas: Script injection allows access to unintended data Affected: 0.8 before 2.5.0 |
| CVE-2017-3154 | 7.5 | Aug 29 | Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information Affected: 0.6.0; 0.6.0; 0.6.0; 0.7.0; 0.7.0; 0.7.0 |
| CVE-2016-8752 | 7.5 | Aug 29 | Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img Affected: 0.6.0; 0.6.0; 0.6.0; 0.7.0; 0.7.0; 0.7.0; +4 more |
| CVE-2024-46910 | 7.1 | Feb 13 | An authenticated user can perform XSS and potentially impersonate another user Affected: 2.0.0 before 2.4.0 |
Showing 6