Known vulnerabilities in Apache Superset - page 3

Software CPE: cpe:2.3:a:apache_foundation:apache_superset:*:*:*:*:*:*:*:*
Total vulnerabilities: 61
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Superset Apache Superset is affected by 61 known vulnerabilities: 3 high, 21 medium, 37 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71204 - Exposure of sensitive information to an unauthorized actor
CVE-2021-41972
CWE-200 Low
No
No
1.3.2 17.01.2023 SB2023011710
#VU71203 - Improper input validation
CVE-2021-42250
CWE-20 Low
No
No
1.3.2 17.01.2023 SB2023011710
#VU71202 - Improper Access Control
CVE-2021-44451
CWE-284 Low
No
No
1.4.0 17.01.2023 SB2023011708
#VU71201 - Permissions, Privileges, and Access Controls
CVE-2022-41703
CWE-264 Low
No
No
1.5.3, 2.0.1 17.01.2023 SB2023011621
#VU71199 - Improper Access Control
CVE-2022-45438
CWE-284 Low
No
No
1.5.3, 2.0.1 17.01.2023 SB2023011621
#VU71198 - Improper input validation
CVE-2022-43721
CWE-20 Low
No
No
1.5.3, 2.0.1 17.01.2023 SB2023011621
#VU71197 - Improper input validation
CVE-2022-43720
CWE-20 Low
No
No
1.5.3, 2.0.1 17.01.2023 SB2023011621
#VU71196 - Cross-Site Request Forgery (CSRF)
CVE-2022-43719
CWE-352 Medium
No
No
1.5.3, 2.0.1 17.01.2023 SB2023011621
#VU71195 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43718
CWE-79 Low
No
No
1.5.3, 2.0.1 17.01.2023 SB2023011621
#VU71187 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-43717
CWE-79 Medium
No
No
1.5.3, 2.0.1 16.01.2023 SB2023011621
#VU64958 - Improper Access Control
CVE-2021-37839
CWE-284 Low
No
No
1.5.1 06.07.2022 SB2022070646
#VU62313 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-27479
CWE-89 High
No
No
1.4.2 14.04.2022 SB2022041403
#VU57404 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-32609
CWE-79 Low
No
No
1.2.0 15.10.2021 SB2021101511
#VU52707 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28125
CWE-601 Medium
No
No
1.1.0 28.04.2021 SB2021042816
#VU51247 - Unrestricted Upload of File with Dangerous Type
CVE-2021-27907
CWE-434 Low
No
No
0.38.1 06.03.2021 SB2021030603
#VU47224 - Exposure of sensitive information to an unauthorized actor
CVE-2020-13952
CWE-200 Low
No
No
0.37.2 30.09.2020 SB20200930104
#VU46773 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13948
CWE-94 Medium
No
No
0.37.1 17.09.2020 SB2020091703
#VU28175 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
0.19.1 22.05.2020 SB2020052202
#VU25762 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12414
CWE-200 Medium
No
No
0.32.0 04.03.2020 SB2019121619
#VU24702 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1932
CWE-200 Medium
No
No
0.35.2 28.01.2020 SB2020012812


Showing elements 41 - 60 out of 61