Login Request a demo
KY
Product
Kylin
by Apache · last CVE Jul 14, 2026
On CISA KEVExploited in the wild
24
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities24In the news0Timeline
Severity mix
Critical 9High 11Medium 4Low 0
Severity
All severities24Critical9High11Medium4Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Kylin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-48944
6.5
1%
Mar 27
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin
Affected: 5.0.0 before 5.0.2
CVE-2021-36774
6.5
2%
Jan 6
Apache Kylin allows users to read data from other database systems using JDBC
Affected: 2.0.0 through 2.6.6; 3.0.0 through 3.1.2
CVE-2020-13937
5.3
78%
Oct 19
Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta,…
Affected: 2.0.0; 2.1.0; 2.2.0; 2.3.0; 2.3.1; 2.3.2; +20 more
CVE-2026-62393
4.3
0%
Jul 14
Apache Kylin: Improper authorization in job information retrieval
Affected: 4.0.0 before 5.0.4
Showing 4