What’s Vulnerable › Products
Apache Software Foundation Apache Linkis vulnerabilities
18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your Apache Software Foundation Apache Linkis version is affected
Latest Apache Software Foundation Apache Linkis vulnerabilities
- CVE-2025-59355 — Apache Linkis: Password Exposure (CVSS 6.5)
- CVE-2025-29847 — Apache Linkis: Arbitrary File Read via Double URL Encoding Bypass (CVSS 7.5)
- CVE-2024-45627 — Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability (CVSS 5.9)
- CVE-2024-39928 — Apache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability (CVSS 7.5)
- CVE-2024-27182 — Apache Linkis Basic management services: Engine material management Arbitrary file deletion vulnerability (CVSS 4.9)
- CVE-2024-27181 — Apache Linkis Basic management services: Privilege Escalation Attack vulnerability (CVSS 8.8)
- CVE-2023-49566 — Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability (CVSS 8.8)
- CVE-2023-46801 — Apache Linkis DataSource: DataSource Remote code execution vulnerability (CVSS 8.8)
- CVE-2023-41916 — Apache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that allows for arbitrary file reading (CVSS 6.5)
- CVE-2023-50740 — Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged (CVSS 5.3)
- CVE-2023-29216 — Apache Linkis DatasourceManager module has a deserialization command execution (CVSS 9.8)
- CVE-2023-29215 — Apache Linkis JDBC EngineCon has a deserialization command execution (CVSS 9.8)
- CVE-2023-27987 — Apache Linkis gateway module token authentication bypass (CVSS 9.1)
- CVE-2023-27603 — Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue (CVSS 9.8)
- CVE-2023-27602 — Apache Linkis publicsercice module unrestricted upload of file (CVSS 9.8)
- CVE-2022-44645 — Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability (CVSS 8.8)
- CVE-2022-44644 — Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability (CVSS 6.5)
- CVE-2022-39944 — The Apache Linkis JDBC EngineConn module has a RCE Vulnerability (CVSS 8.8)