Vendors / provectus Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now provectus records in CISA KEV No provectus vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
An issue discovered in provectus kafka-ui 0.4.0 through 0.7.2 allows remote attackers to execute arbitrary code via the q parameter of /api/clusters/local/topics/{topic}/messages.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.8684 · Published 2024-01-25 · No fix listed CWE-94
Priority HIGH 70
A vulnerability was identified in provectus kafka-ui up to 0.7.2.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.02578 · Published 2026-04-05 · No fix listed CWE-74
Priority HIGH 70
Kafka UI is an Open-Source Web UI for Apache Kafka Management.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.51051 · Published 2024-06-19 · Fixed in 0.7.2 CWE-502
Priority MEDIUM 57
A security flaw has been discovered in provectus kafka-ui up to 0.7.2.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00413 · Published 2026-08-24 · No fix listed CWE-74
Open these records in search → All records by CVSS severity
0 2 2 0 0
