Known vulnerabilities in Apache Impala

Vendor: Apache Foundation
Software: Apache Impala
Software CPE: cpe:2.3:a:apache_foundation:apache_impala:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Impala Apache Impala is affected by 5 known vulnerabilities: 2 medium, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148865 - Incorrect Authorization
CVE-2026-65181		 CWE-863 Low
No
No
 4.5.2 10.09.2026 SB2026091004
#VU148864 - Server-Side Request Forgery (SSRF)
CVE-2026-57866		 CWE-918 Low
No
No
 4.5.2 10.09.2026 SB2026091004
#VU148863 - Improper Verification of Cryptographic Signature
CVE-2026-56207		 CWE-347 Medium
No
No
 4.5.2 10.09.2026 SB2026091004
#VU148862 - Server-Side Request Forgery (SSRF)
CVE-2026-54048		 CWE-918 Low
No
No
 4.5.2 10.09.2026 SB2026091004
#VU55270 - Unprotected Storage of Credentials
CVE-2021-28131		 CWE-256 Medium
No
No
 4.0 23.07.2021 SB2021072305