Known vulnerabilities in Apache Superset - page 2

Software CPE: cpe:2.3:a:apache_foundation:apache_superset:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Superset Apache Superset is affected by 63 known vulnerabilities: 3 high, 21 medium, 39 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85982 - Permissions, Privileges, and Access Controls
CVE-2023-49734
CWE-264 Medium
No
No
2.1.3, 3.0.2 31.01.2024 SB2024013164
#VU85981 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-49736
CWE-89 Medium
No
No
2.1.3, 3.0.2 31.01.2024 SB2024013164
#VU85979 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-42502
CWE-601 Low
No
No
3.0.0 31.01.2024 SB2024013163
#VU85978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-42505
CWE-200 Low
No
No
3.0.0 31.01.2024 SB2024013163
#VU85977 - Resource exhaustion
CVE-2023-42504
CWE-400 Medium
No
No
2.1.3 31.01.2024 SB2024013162
#VU85976 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43701
CWE-79 Low
No
No
2.1.2 31.01.2024 SB2024013161
#VU85975 - Permissions, Privileges, and Access Controls
CVE-2023-42501
CWE-264 Low
No
No
2.1.2 31.01.2024 SB2024013161
#VU85974 - Improper Authorization
CVE-2023-40610
CWE-285 Medium
No
No
2.1.2 31.01.2024 SB2024013161
#VU85973 - Improper Access Control
CVE-2023-32672
CWE-284 Low
No
No
2.1.1 31.01.2024 SB2024013158
#VU85972 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-37941
CWE-94 Medium
Available
No
2.1.1 31.01.2024 SB2024013158
#VU85971 - Improper Access Control
CVE-2023-39265
CWE-284 Medium
No
No
2.1.1 31.01.2024 SB2024013158
#VU85970 - Exposure of sensitive information to an unauthorized actor
CVE-2023-39264
CWE-200 Low
No
No
2.1.1 31.01.2024 SB2024013158
#VU85969 - Improper Access Control
CVE-2023-27526
CWE-284 Low
No
No
2.1.1 31.01.2024 SB2024013158
#VU85968 - Missing Authorization
CVE-2023-27523
CWE-862 Low
No
No
2.1.1 31.01.2024 SB2024013158
#VU85967 - Server-Side Request Forgery (SSRF)
CVE-2023-36388
CWE-918 Medium
No
No
2.1.1 31.01.2024 SB2024013158
#VU85966 - Improper Access Control
CVE-2023-36387
CWE-284 Low
No
No
2.1.1 31.01.2024 SB2024013158
#VU85965 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30776
CWE-200 Low
No
No
2.1.0 31.01.2024 SB2023042444
#VU85964 - Missing Authorization
CVE-2023-27525
CWE-862 Low
No
No
2.1.0 31.01.2024 SB2023042444
#VU85735 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49657
CWE-79 Low
No
No
3.0.3 23.01.2024 SB2024012362
#VU85166 - Insecure Default Initialization of Resource
CVE-2023-27524
CWE-1188 High
Available
Exploited
2.1.0 09.01.2024 SB2023042444


Showing elements 21 - 40 out of 63