apolloconfig

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

apolloconfig records in CISA KEV

No apolloconfig vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Apollo 5 records MEDIUM

Records

8 records

TI-2022-04551 CVE-2022-4962 · GHSA-6fwf-qq7q-w473

Apollo Configuration Center users improper authorization

MEDIUM 53

A vulnerability was found in Apollo 2.0.0/2.0.1 and classified as problematic.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00463 Published 2024-01-12 No fix listed CWE-285

TI-2026-42759 CVE-2026-59955 · GHSA-h4pc-58cc-hc95

Apollo ConfigService access key authentication bypass via raw config file appId parsing

MEDIUM 40

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00574 Published 2026-07-15 Fixed in 2.5.2 CWE-20

TI-2026-42758 CVE-2026-59954 · GHSA-4w3q-qpfq-v992

Apollo ConfigService access key authentication bypass via appId parsing and non-canonical matching

MEDIUM 40

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00574 Published 2026-07-15 Fixed in 2.5.2 CWE-20

TI-2023-10873 CVE-2023-25570 · GHSA-368x-wmmg-hq5c

Apollo has potential access control security issue in eureka

MEDIUM 40

Apollo is a configuration management system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00823 Published 2023-02-20 Fixed in 2.1.0 CWE-306

TI-2024-28573 CVE-2024-42662 · GHSA-j5jg-j64j-c6rq

An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted request.

LOW 39

An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0053 Published 2024-08-20 No fix listed

TI-2025-23818 CVE-2025-32781 · GHSA-jxpj-9j24-w337

Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId

LOW 29

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00415 Published 2026-07-15 Fixed in 2.5.0 CWE-639

TI-2023-10872 CVE-2023-25569 · GHSA-fmxq-v8mg-qh25

apollo-portal has potential CSRF issue

LOW 26

Apollo is a configuration management system.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00351 Published 2023-02-20 Fixed in 2.1.0 CWE-352

TI-2024-29046 CVE-2024-43397 · GHSA-c6c3-h4f7-3962

Potential unauthorized access issue in apollo-portal

LOW 20

Apollo is a configuration management system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00349 Published 2024-08-20 Fixed in 2.3.0 CWE-284

Open these records in search →

Critical	0
High	4
Medium	4
Low	0
No CVSS	0