Known vulnerabilities in Apache Kylin

Vendor: Apache Foundation
Software: Apache Kylin
Software CPE: cpe:2.3:a:apache_foundation:kylin:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 24
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Kylin Apache Kylin is affected by 24 known vulnerabilities: 5 high, 14 medium, 5 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145209 - Improper Authorization
CVE-2026-62393		 CWE-285 Low
No
No
 5.0.4 25.08.2026 SB2026082565
#VU145208 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-62392		 CWE-78 Medium
No
No
 5.0.4 25.08.2026 SB2026082565
#VU145207 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-62390		 CWE-89 Medium
No
No
 5.0.4 25.08.2026 SB2026082565
#VU116260 - Improper Authentication
CVE-2025-61733		 CWE-287 High
No
No
 5.0.3 01.10.2025 SB2025100180
#VU116257 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-61734		 CWE-22 Low
No
No
 5.0.3 01.10.2025 SB2025100180
#VU116255 - Server-Side Request Forgery (SSRF)
CVE-2025-61735		 CWE-918 Low
No
No
 5.0.3 01.10.2025 SB2025100180
#VU106088 - Server-Side Request Forgery (SSRF)
CVE-2024-48944		 CWE-918 Medium
No
No
 5.0.2 27.03.2025 SB2025032712
#VU106087 - Improper Control of Generation of Code ('Code Injection')
CVE-2025-30067		 CWE-94 Low
No
No
 5.0.2 27.03.2025 SB2025032712
#VU99650 - Session Fixation
CVE-2024-23590		 CWE-384 Medium
No
No
 5.0.0 04.11.2024 SB2024110413
#VU85866 - Missing Authorization
CVE-2023-29055		 CWE-862 Medium
No
No
 4.0.4 29.01.2024 SB2024012920
#VU70546 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-43396		 CWE-78 High
No
No
 4.0.3 30.12.2022 SB2022123009
#VU70545 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-44621		 CWE-78 High
No
No
 4.0.3 30.12.2022 SB2022123009
#VU68114 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-24697		 CWE-78 Medium
No
No
 4.0.2 11.10.2022 SB2022101126
#VU59279 - Server-Side Request Forgery (SSRF)
CVE-2021-27738		 CWE-918 High
No
No
 3.1.3 06.01.2022 SB2022010627
#VU59278 - Permissions, Privileges, and Access Controls
CVE-2021-36774		 CWE-264 Medium
No
No
 3.1.3 06.01.2022 SB2022010627
#VU59277 - Improper input validation
CVE-2021-31522		 CWE-20 Medium
No
No
 3.1.3, 4.0.1 06.01.2022 SB2022010627
#VU59276 - Storing Passwords in a Recoverable Format
CVE-2021-45458		 CWE-257 Low
No
No
 3.1.3, 4.0.1 06.01.2022 SB2022010627
#VU59275 - Origin Validation Error
CVE-2021-45457		 CWE-346 Medium
No
No
 3.1.3, 4.0.1 06.01.2022 SB2022010627
#VU59274 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-45456		 CWE-78 Medium
No
No
 4.0.1 06.01.2022 SB2022010627
#VU49589 - Improper Access Control
CVE-2020-13937		 CWE-284 Medium
Available
No
 3.1.1 19.10.2020 SB2020101916


Showing elements 1 - 20 out of 24