Login Request a demo
DR
Product
Drill
by Apache · last CVE Jul 24, 2024
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Drill to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-48362
8.8
1%
Jul 24
XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file
Affected: 1.9.0 before 1.21.2
CVE-2019-14439
7.5
11%
Jul 30
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2
Affected: 1.16.0
CVE-2019-10241
6.1
9%
Apr 22
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL…
Affected: 1.16.0
CVE-2010-5312
6.1
18%
Nov 24
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via…
Affected: 1.16.0
CVE-2019-0201
5.9
10%
May 23
An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta
Affected: 1.16.0
CVE-2017-12630
5.4
1%
Dec 18
In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards
Affected: through 1.11.0
Showing 6