Apache Software Foundation Apache Impala vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Latest Apache Software Foundation Apache Impala vulnerabilities

CVE-2026-97720 — Apache Impala: Impala Executor Webserver Auth Bypass (CVSS 9.1)
CVE-2026-93684 — Apache Impala: Stored XSS in Impala query plans (CVSS 5.4)
CVE-2026-90466 — Apache Impala: Path traversal executes JARs outside trusted paths (CVSS 6.5)
CVE-2026-65181 — Apache Impala: RCE via External Data Source Class Loading (CVSS 8.1)
CVE-2026-57866 — Apache Impala: Secrets Exfiltration via SSRF (CVSS 8.8)
CVE-2026-56207 — Apache Impala: SAML authentication bypass via forged bearer token (CVSS 9.8)
CVE-2026-54048 — Apache Impala: Avro Schema URL Server-Side Request Forgery (CVSS 5.3)
CVE-2021-28131 — Impala logs contain secrets (CVSS 7.5)
CVE-2019-10084 — (CVSS 7.5)
CVE-2018-11792 — (CVSS 9.8)
CVE-2018-11785 — (CVSS 6.5)
CVE-2017-9792 — (CVSS 6.5)
CVE-2017-5652 — (CVSS 7.5)
CVE-2017-5640 — (CVSS 9.8)