Apache Storm vulnerabilities

2 published CVEs name Apache Storm among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 0
Critical: 1
Known exploited: 0

Critical 1High 1Medium 0Low 0Not scored 0

Newest CVEs

CVE-2018-11779
In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is possible to cause the Storm UI daemon to…
Apache · Storm
Critical9.8
CVE-2019-0202
The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating…
Apache · Storm
High7.5

Most common weaknesses