Apache Atlas
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_atlas:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Atlas (e23cb87f-a33c-513f-83e7-3e2f9df23b11) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-62198 |
vulnerable | 2026-07-29 00:09:52.074927 |
Apache Atlas: Stored XSS in Create Entity page
An authenticated user can perform XSS.
This issue affects Apache Atlas versions 2.4.0 and earlier.
Users are recommended to upgrade to version 2.5.0, which fixes the issue.
Published: 2026-06-22T07:47:11.847Z
Updated: 2026-06-22T15:50:36.658Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-40563 |
vulnerable | 2026-06-08 08:01:20.841392 |
Apache Atlas: Script injection allows access to unintended data
Description:
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas
Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can alter Gremlin traversal logic within grammar-allowed characters to access unintended data
Affect Version:
This issue affects Apache Atlas: from 0.8 through 2.4.0.
For the affect version >= 2.0, vulnerability is only when Atlas is deployed with below non-default configuration.
atlas.dsl.executor.traversal=false
Mitigation:
Users are recommended to upgrade to version 2.5.0, which fixes the issue.
Published: 2026-05-04T15:17:32.511Z
Updated: 2026-05-06T13:27:03.304Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46910 |
vulnerable | 2026-06-08 06:48:10.826783 |
Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user
An authenticated user can perform XSS and potentially impersonate another user.
This issue affects Apache Atlas versions 2.3.0 and earlier.
Users are recommended to upgrade to version 2.4.0, which fixes the issue.
Published: 2025-02-13T08:52:57.498Z
Updated: 2025-10-17T15:50:34.064Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34271 |
vulnerable | 2026-06-08 05:44:52.524686 |
Apache Atlas: zip path traversal in import functionality
A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.
Published: 2022-12-14T08:35:59.499Z
Updated: 2025-04-18T14:28:47.874Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3155 |
vulnerable | 2026-06-08 05:09:26.675290 |
Details available
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting.
Published: 2017-08-29T20:00:00.000Z
Updated: 2024-09-16T19:36:18.696Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3154 |
vulnerable | 2026-06-08 05:09:26.674885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3153 |
vulnerable | 2026-06-08 05:09:26.674451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3152 |
vulnerable | 2026-06-08 05:09:26.674013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3151 |
vulnerable | 2026-06-08 05:09:26.671700 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-3150 |
vulnerable | 2026-06-08 05:09:26.667567 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8752 |
vulnerable | 2026-06-08 05:08:14.815367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.