WaratekVRT Sign in

Org.apache.zeppelin Zeppelin-interpreter CVEs

3 CVEs

Reset
More filters (2)
Columns
Vendor org.apache.zeppelin✕Product zeppelin-interpreter✕
Overview 3 matches · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
3matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 100.0%
Critical 1 33.3% High 1 33.3% Medium 1 33.3% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 3 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 3 100.0%
split by peak 2 / month
No exploit published: 3 Medium: 1High: 1Critical: 1 not blocked: 3 No public exploit: 3
Apr 242 No exploit published2 Critical1 Medium1 not blocked2 No public exploit2 May 240 Jun 240 Jul 240 Aug 240 Sep 240 Oct 240 Nov 240 Dec 240 Jan 250 Feb 250 Mar 250 Apr 250 May 250 Jun 250 Jul 251 No exploit published1 High1 not blocked1 No public exploit1
May 24Jul 24Sep 24Nov 24Jan 25Mar 25May 25Jul 25
3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-41169 High 2025-07-12 No exploit published No public exploit The attacker can use the raft server protocol in an unauthenticated way. The attacker can see the server's resources, including directories and files. This issue affects Apache Zeppelin: from 0.10.1 up to 0.12.0. Users are recommended to upgrade to version 0.12.0, which fixes the issue by removing the Cluster Interpreter.
CVE-2024-31868 Medium 2024-04-09 No exploit published No public exploit Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers can modify helium.json and exposure XSS attacks to normal users. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1. Users are recommended to upgrade to version 0.11.1, which fixes the issue.
CVE-2024-31866 Critical 2024-04-09 No exploit published No public exploit Improper Encoding or Escaping of Output vulnerability in Apache Zeppelin. The attackers can execute shell scripts or malicious code by overriding configuration like ZEPPELIN_INTP_CLASSPATH_OVERRIDES. This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1. Users are recommended to upgrade to version 0.11.1, which fixes the issue.