CVE-2026-40563

>= 0.8 and < 2.5.0

Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL se

8.1HIGH

CVE-2024-46910

>= 2.0.0 and < 2.4.0

An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 a

7.1HIGH

CVE-2023-3756

all versions

A vulnerability was found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this is

3.5LOW

CVE-2023-3755

all versions

A vulnerability has been found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by th

3.5LOW

CVE-2022-34271

>= 0.8.4 and <= 2.2.0

A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affec

8.8HIGH

CVE-2020-17521

all versions

Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of

5.5MEDIUM

CVE-2020-13928

< 2.1.0

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctl

6.1MEDIUM

CVE-2019-10070

all versions

Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality

6.1MEDIUM

CVE-2017-3155

all versions

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting.

6.1MEDIUM

CVE-2017-3154

all versions

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive informat

7.5HIGH

CVE-2017-3153

all versions

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.

6.1MEDIUM

CVE-2017-3152

all versions

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality.

6.1MEDIUM

CVE-2017-3151

all versions

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag f

6.1MEDIUM

CVE-2017-3150

all versions

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.

6.1MEDIUM

CVE-2016-8752

all versions

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents

7.5HIGH