Apache Kylin
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_kylin:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Kylin (ec6cb259-23b8-58af-8dee-4ad94a337ad4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-62393 |
vulnerable | 2026-07-29 01:06:19.075454 |
Apache Kylin: Improper authorization in job information retrieval
Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects.
This issue affects Apache Kylin: from 4 through 5.0.3.
Users are recommended to upgrade to version 5.0.4, which fixes the issue.
Published: 2026-07-14T12:19:27.705Z
Updated: 2026-07-15T15:13:25.772Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62392 |
vulnerable | 2026-07-29 01:06:19.075180 |
Apache Kylin: OS Command Injection via Async Query API
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. A backend API may bring job config parameters to OS command line.
This issue affects Apache Kylin: from 4 through 5.0.3.
Users are recommended to upgrade to version 5.0.4, which fixes the issue.
Published: 2026-07-14T12:18:57.308Z
Updated: 2026-07-15T04:00:58.707Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62390 |
vulnerable | 2026-07-29 01:06:19.074881 |
Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh API
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. A backend API refreshing table catalog may cause the injection to the generated SQL.
This issue affects Apache Kylin: from 4 through 5.0.3.
Users are recommended to upgrade to version 5.0.4, which fixes the issue.
Published: 2026-07-14T12:09:40.980Z
Updated: 2026-07-14T16:12:57.844Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61735 |
vulnerable | 2026-06-08 07:37:27.970229 |
Apache Kylin: Server-Side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.
This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.
Users are recommended to upgrade to version 5.0.3, which fixes the issue.
Published: 2025-10-02T09:47:49.948Z
Updated: 2025-11-04T21:14:09.199Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61734 |
vulnerable | 2026-06-08 07:37:27.969890 |
Apache Kylin: improper restriction of file read
Files or Directories Accessible to External Parties vulnerability in Apache Kylin.
You are fine as long as the Kylin's system and project admin access is well protected.
This issue affects Apache Kylin: from 4.0.0 through 5.0.2.
Users are recommended to upgrade to version 5.0.3, which fixes the issue.
Published: 2025-10-02T09:47:15.317Z
Updated: 2025-11-04T21:14:07.897Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61733 |
vulnerable | 2026-06-08 07:37:27.968217 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-30067 |
vulnerable | 2026-06-08 07:16:59.028602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48944 |
vulnerable | 2026-06-08 06:50:11.748563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23590 |
vulnerable | 2026-06-08 06:29:39.973101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29055 |
vulnerable | 2026-06-08 06:02:38.186694 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-44621 |
vulnerable | 2026-06-08 05:49:35.893236 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43396 |
vulnerable | 2026-06-08 05:49:31.762380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24697 |
vulnerable | 2026-06-08 05:41:01.394878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45458 |
vulnerable | 2026-06-08 05:36:48.171590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45457 |
vulnerable | 2026-06-08 05:36:48.169623 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45456 |
vulnerable | 2026-06-08 05:36:48.166998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36774 |
vulnerable | 2026-06-08 05:32:52.507712 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31522 |
vulnerable | 2026-06-08 05:31:53.577378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27738 |
vulnerable | 2026-06-08 05:31:22.102530 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.