Atlas

This hub aggregates every CVE we track for Atlas, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Atlas.

• CVE-2025-62198Apache Atlas: Stored XSS in Create Entity page5.4Jun 22, 2026
• CVE-2026-40563Apache Atlas: Script injection allows access to unintended data8.1May 4, 2026
• CVE-2025-22509WordPress Atlas theme <= 2.1.0 - Local File Inclusion vulnerability8.1Jan 8, 2026
• BDU:2025-14772Уязвимость веб-браузеров Atlas и Comet, связанная с недостаточной защитой служебных данных, позволяющая нарушителю проводить спуфинг-атаки7.1Nov 28, 2025
• CVE-2024-46910Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user7.1Feb 13, 2025
• CVE-2023-3756Creativeitem Atlas Business Directory Listing search cross site scripting3.5Jul 19, 2023
• CVE-2023-3755Creativeitem Atlas Business Directory Listing filter_listings cross site scripting3.5Jul 19, 2023
• CVE-2022-34271Apache Atlas: zip path traversal in import functionality8.8Dec 14, 2022
• CVE-2020-17521Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method...5.5Dec 7, 2020
• CVE-2020-13928Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.6.1Sep 16, 2020
• CVE-2019-10070Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality6.1Nov 18, 2019
• CVE-2017-3150Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.6.1Aug 29, 2017
• CVE-2017-3153Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.6.1Aug 29, 2017
• CVE-2017-3151Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality.6.1Aug 29, 2017
• CVE-2017-3152Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality.6.1Aug 29, 2017