Approved changes feed: RSS · Atom
cpe:2.3:a:apache:kylin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Kylin (c7126c68-0c13-5837-ae89-f066c2b60ff8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/kylin |
purl2cpe | 2026-06-01 10:14:30.210068 |
pkg:github/apache/kylin |
purl2cpe | 2026-06-01 10:14:30.210070 |
pkg:maven/org.apache.kylin/kylin |
purl2cpe | 2026-06-01 10:14:30.210072 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-61735 |
vulnerable | 2026-06-08 07:37:27.970265 |
Apache Kylin: Server-Side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.
This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.
Users are recommended to upgrade to version 5.0.3, which fixes the issue.
Published: 2025-10-02T09:47:49.948Z
Updated: 2025-11-04T21:14:09.199Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61734 |
vulnerable | 2026-06-08 07:37:27.969934 |
Apache Kylin: improper restriction of file read
Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
You are fine as long as the Kylin's system and project admin access is well protected.
This issue affects Apache Kylin: from 4.0.0 through 5.0.2.
Users are recommended to upgrade to version 5.0.3, which fixes the issue.
Published: 2025-10-02T09:47:15.317Z
Updated: 2025-11-04T21:14:07.897Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61733 |
vulnerable | 2026-06-08 07:37:27.969437 |
Apache Kylin: Authentication bypass
Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin.
This issue affects Apache Kylin: from 4.0.0 through 5.0.2.
Users are recommended to upgrade to version 5.0.3, which fixes the issue.
Published: 2025-10-02T09:47:39.126Z
Updated: 2026-02-26T17:48:23.007Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30067 |
vulnerable | 2026-06-08 07:16:59.029779 |
Apache Kylin: The remote code execution via jdbc url
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin.
If an attacker gets access to Kylin's system or project admin permission, the JDBC connection configuration maybe altered to execute arbitrary code from the remote. You are fine as long as the Kylin's system and project admin access is well protected.
This issue affects Apache Kylin: from 4.0.0 through 5.0.1.
Users are recommended to upgrade to version 5.0.2 or above, which fixes the issue.
Published: 2025-03-27T15:06:36.598Z
Updated: 2025-03-27T17:56:13.192Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48944 |
vulnerable | 2026-06-08 06:50:11.749705 |
Apache Kylin: SSRF vulnerability in the diagnosis api
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke "/kylin/api/xxx/diag" api on another internal host and possibly get leaked information. There are two preconditions: 1) The attacker has got admin access to a kylin server; 2) Another internal host has the "/kylin/api/xxx/diag" api
endpoint open for service.
This issue affects Apache Kylin: from 5.0.0
through
5.0.1.
Users are recommended to upgrade to version 5.0.2, which fixes the issue.
Published: 2025-03-27T15:05:57.302Z
Updated: 2025-05-08T10:26:40.785Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23590 |
vulnerable | 2026-06-08 06:29:39.973734 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29055 |
vulnerable | 2026-06-08 06:02:38.187863 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-44621 |
vulnerable | 2026-06-08 05:49:35.893354 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43396 |
vulnerable | 2026-06-08 05:49:31.764798 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24697 |
vulnerable | 2026-06-08 05:41:01.395714 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45458 |
vulnerable | 2026-06-08 05:36:48.171732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45457 |
vulnerable | 2026-06-08 05:36:48.170991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36774 |
vulnerable | 2026-06-08 05:32:52.508833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31522 |
vulnerable | 2026-06-08 05:31:53.577939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27738 |
vulnerable | 2026-06-08 05:31:22.103402 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1956 |
vulnerable | 2026-06-08 05:21:03.758199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1937 |
vulnerable | 2026-06-08 05:21:03.601796 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13926 |
vulnerable | 2026-06-08 05:18:01.384765 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13925 |
vulnerable | 2026-06-08 05:18:01.384329 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.