Known vulnerabilities in Apache Superset - page 2

Software CPE: cpe:2.3:a:apache_foundation:apache_superset:*:*:*:*:*:*:*:*
Total vulnerabilities: 61
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Superset Apache Superset is affected by 61 known vulnerabilities: 3 high, 21 medium, 37 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85979 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-42502
CWE-601 Low
No
No
3.0.0 31.01.2024 SB2024013163
#VU85978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-42505
CWE-200 Low
No
No
3.0.0 31.01.2024 SB2024013163
#VU85977 - Resource exhaustion
CVE-2023-42504
CWE-400 Medium
No
No
2.1.3 31.01.2024 SB2024013162
#VU85976 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-43701
CWE-79 Low
No
No
2.1.2 31.01.2024 SB2024013161
#VU85975 - Permissions, Privileges, and Access Controls
CVE-2023-42501
CWE-264 Low
No
No
2.1.2 31.01.2024 SB2024013161
#VU85974 - Improper Authorization
CVE-2023-40610
CWE-285 Medium
No
No
2.1.2 31.01.2024 SB2024013161
#VU85973 - Improper Access Control
CVE-2023-32672
CWE-284 Low
No
No
2.1.1 31.01.2024 SB2024013158
#VU85972 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-37941
CWE-94 Medium
Available
No
2.1.1 31.01.2024 SB2024013158
#VU85971 - Improper Access Control
CVE-2023-39265
CWE-284 Medium
No
No
2.1.1 31.01.2024 SB2024013158
#VU85970 - Exposure of sensitive information to an unauthorized actor
CVE-2023-39264
CWE-200 Low
No
No
2.1.1 31.01.2024 SB2024013158
#VU85969 - Improper Access Control
CVE-2023-27526
CWE-284 Low
No
No
2.1.1 31.01.2024 SB2024013158
#VU85968 - Missing Authorization
CVE-2023-27523
CWE-862 Low
No
No
2.1.1 31.01.2024 SB2024013158
#VU85967 - Server-Side Request Forgery (SSRF)
CVE-2023-36388
CWE-918 Medium
No
No
2.1.1 31.01.2024 SB2024013158
#VU85966 - Improper Access Control
CVE-2023-36387
CWE-284 Low
No
No
2.1.1 31.01.2024 SB2024013158
#VU85965 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30776
CWE-200 Low
No
No
2.1.0 31.01.2024 SB2023042444
#VU85964 - Missing Authorization
CVE-2023-27525
CWE-862 Low
No
No
2.1.0 31.01.2024 SB2023042444
#VU85963 - Server-Side Request Forgery (SSRF)
CVE-2023-25504
CWE-918 Medium
No
No
2.1.0 31.01.2024 SB2023042444
#VU85735 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49657
CWE-79 Low
No
No
3.0.3 23.01.2024 SB2024012362
#VU85166 - Insecure Default Initialization of Resource
CVE-2023-27524
CWE-1188 High
Available
Exploited
2.1.0 09.01.2024 SB2023042444
#VU71205 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-41971
CWE-89 Low
No
No
1.3.1 17.01.2023 SB2023011711


Showing elements 21 - 40 out of 61