Known vulnerabilities in Apache StreamPark

Vendor: Apache Foundation
Software: Apache StreamPark
Software CPE: cpe:2.3:a:apache_foundation:apache_streampark:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache StreamPark Apache StreamPark is affected by 8 known vulnerabilities: 1 high, 6 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120171 - Use of Hard-coded Cryptographic Key
CVE-2025-54947		 CWE-321 Medium
No
No
 2.1.7 17.12.2025 SB2025120442
#VU120170 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2025-54981		 CWE-338 Medium
No
No
 2.1.7 17.12.2025 SB2025120442
#VU119151 - Use of Hard-coded Cryptographic Key
CVE-2025-53960		 CWE-321 Medium
No
No
 2.1.7 04.12.2025 SB2025120442
#VU94769 - Insufficient Session Expiration
CVE-2024-29070		 CWE-613 Medium
No
No
 2.1.4 26.07.2024 SB2024072652
#VU94768 - Improper Access Control
CVE-2024-34457		 CWE-284 Low
No
No
 2.1.4 26.07.2024 SB2024072652
#VU94382 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-45801		 CWE-90 Medium
No
No
 2.0.0 17.07.2024 SB2024071708
#VU94381 - Unrestricted Upload of File with Dangerous Type
CVE-2022-45802		 CWE-434 High
No
No
 2.0.0 17.07.2024 SB2024071708
#VU94380 - Improper Authorization
CVE-2022-46365		 CWE-285 Medium
No
No
 2.0.0 17.07.2024 SB2024071708