Known vulnerabilities in Apache Airflow - page 6

Software CPE: cpe:2.3:a:apache_foundation:apache_airflow:*:*:*:*:*:*:*:*
Total vulnerabilities: 110
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Airflow Apache Airflow is affected by 110 known vulnerabilities: 8 high, 28 medium, 74 low Critical High Medium Low

Vulnerabilities (110)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64047 - Improper Authentication
CVE-2020-13927
CWE-287 High
Available
Exploited
1.10.11 07.06.2022 SB2020111083
SB2022060724
#VU48936 - Server-Side Request Forgery (SSRF)
CVE-2020-17513
CWE-918 Medium
No
No
1.10.13 11.12.2020 SB2020020715
SB2022060724
#VU46772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13944
CWE-79 Low
No
No
1.10.13 17.09.2020 SB2020091702
SB2022060724
#VU31689 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11983
CWE-79 Low
No
No
1.10.11 20.07.2020 SB2020072006
#VU31688 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-9485
CWE-79 Low
No
No
1.10.11 20.07.2020 SB2020072006
#VU31687 - Command injection
CVE-2020-11978
CWE-77 Medium
Available
Exploited
1.10.11 20.07.2020 SB2020072006
#VU31686 - Insecure Default Variable Initialization
CVE-2020-11982
CWE-453 Medium
No
No
1.10.11 20.07.2020 SB2020072006
SB2022060724
#VU31685 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-11981
CWE-78 Medium
No
No
1.10.11 20.07.2020 SB2020072006
SB2022060724
#VU25034 - Cleartext Storage of Sensitive Information
CWE-312 Low
No
No
1.10.8 07.02.2020 SB2020020715
#VU24393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12398
CWE-79 Low
No
No
1.10.5 20.01.2020 SB2020012005


Showing elements 101 - 120 out of 110