TI-2026-37315 CVE-2026-50622 · GHSA-w667-wgvw-q2hc
Apache Atlas: Missing Authorization on Admin Endpoints
Priority MEDIUM 41
Description: Missing Authorization in Apache Atlas.
Vulnerabilities
15 records
TI-2025-38511 CVE-2025-62198 · GHSA-v73p-f52r-fmmr
Apache Atlas: Stored XSS in Create Entity page
Priority LOW 25
An authenticated user can perform XSS.
TI-2026-29304 CVE-2026-40563 · GHSA-35xx-9xrg-gwhf
Apache Atlas: Script injection allows access to unintended data
Priority LOW 38
Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings.
TI-2024-31320 CVE-2024-46910 · GHSA-x3v6-f5fr-4wwv
Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user
Priority LOW 32
An authenticated user can perform XSS and potentially impersonate another user.
TI-2022-15183 CVE-2022-34271 · GHSA-p782-4j23-xqcg
Apache Atlas: zip path traversal in import functionality
Priority MEDIUM 43
A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem.
TI-2020-13270 CVE-2020-17521 · GHSA-rcjj-h6gh-jf3r
Apache Groovy provides extension methods to aid with creating temporary directories.
Priority LOW 27
Apache Groovy provides extension methods to aid with creating temporary directories.
TI-2020-10906 CVE-2020-13928 · GHSA-h6xq-3h62-99qx
Cross-site scripting in Apache Atlas
Priority LOW 32
Apache Atlas before 2.1.0 contain a XSS vulnerability.
TI-2019-07396 CVE-2019-10070 · GHSA-v62j-fcxq-j239
Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality
Priority LOW 31
Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality
TI-2017-02371 CVE-2017-3155 · GHSA-q586-7p8w-9pg8
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting.
Priority LOW 31
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting.
TI-2017-02370 CVE-2017-3154 · GHSA-fx92-wh72-8g9q
Information disclosure in Apache Atlas
Priority LOW 37
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.
TI-2017-02369 CVE-2017-3153 · GHSA-frqh-x6r7-h6mq
Cross-site scripting in Apache Atlas
Priority LOW 32
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.
TI-2017-02368 CVE-2017-3152 · GHSA-9xwq-72vp-5j3c
Cross-site scripting in Apache Atlas
Priority LOW 32
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality.
TI-2017-02367 CVE-2017-3151 · GHSA-236h-r3w7-c85c
Cross-site scripting in Apache Atlas
Priority LOW 31
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality.
TI-2017-02366 CVE-2017-3150 · GHSA-wvmq-w7m8-g9xm
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.
Priority LOW 32
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.
TI-2016-07209 CVE-2016-8752 · GHSA-m2rr-h6g4-9cm9
Improper access control in Apache Atlas
Priority LOW 37
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.