WaratekVRT Sign in

Medium Org.apache.atlas CVEs with no public exploit

8 CVEs

Reset
More filters (1)
Columns
Vendor org.apache.atlas✕
Overview 8 matches · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
8matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 8 100.0%
Critical 0 0.0% High 0 0.0% Medium 8 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 8 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 8 100.0%
split by peak 5 / year
No exploit published: 8 Medium: 8 not blocked: 8 No public exploit: 8
20175 No exploit published5 Medium5 not blocked5 No public exploit5 20180 20191 No exploit published1 Medium1 not blocked1 No public exploit1 20201 No exploit published1 Medium1 not blocked1 No public exploit1 20210 20220 20230 20240 20250 20261 No exploit published1 Medium1 not blocked1 No public exploit1
2017201820192020202120222023202420252026
8 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2025-62198 Medium 2026-06-22 No exploit published No public exploit An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue.
CVE-2020-13928 Medium 2020-09-16 No exploit published No public exploit Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.
CVE-2019-10070 Medium 2019-11-18 No exploit published No public exploit Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality
CVE-2017-3155 Medium 2017-08-29 No exploit published No public exploit Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting.
CVE-2017-3153 Medium 2017-08-29 No exploit published No public exploit Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.
CVE-2017-3152 Medium 2017-08-29 No exploit published No public exploit Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality.
CVE-2017-3151 Medium 2017-08-29 No exploit published No public exploit Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality.
CVE-2017-3150 Medium 2017-08-29 No exploit published No public exploit Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.