Known vulnerabilities in Apache SkyWalking
Vendor:
Apache Foundation
Software:
Apache SkyWalking
Software CPE:
cpe:2.3:a:apache_foundation:skywalking:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
4
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146943 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-85229 |
CWE-79 | Medium | 11.0.0 | 04.09.2026 |
SB2026090444 |
||
| #VU146942 - Cleartext Transmission of Sensitive Information CVE-2026-71216 |
CWE-319 | Medium | 11.0.0 | 04.09.2026 |
SB2026090444 |
||
| #VU118826 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-54057 |
CWE-79 | Low | 10.3.0 | 28.11.2025 |
SB2025112812 |
||
| #VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228 |
CWE-94 | Critical | 8.9.1 | 10.12.2021 |
SB2021121003 SB2021121101 SB2021121201 and 338 more |