Known vulnerabilities in Apache Atlas

Vendor: Apache Foundation
Software: Apache Atlas
Software CPE: cpe:2.3:a:apache_foundation:apache_atlas:*:*:*:*:*:hadoop:*:*
Website: https://www.apache.org
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Atlas Apache Atlas is affected by 6 known vulnerabilities: 1 medium, 5 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145302 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-40563		 CWE-94 Medium
No
No
 2.5.0 25.08.2026 SB2026082577
#VU145259 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-62198		 CWE-79 Low
No
No
 2.5.0 25.08.2026 SB2026082577
#VU144798 - Missing Authorization
CVE-2026-50622		 CWE-862 Low
No
No
 2.6.0 24.08.2026 SB20260824138
#VU70445 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-34271		 CWE-22 Low
No
No
 2.3.0 20.12.2022 SB2022122010
#VU46720 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13928		 CWE-79 Low
No
No
 2.1.0 15.09.2020 SB2020091503
#VU22834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10070		 CWE-79 Low
No
No
 0.8.4, 1.2.0 19.11.2019 SB2019111906