Skip to content

Product

apache drill vulnerabilities

4 published CVES affecting apache drill, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
0
Medium
4
Low
0
Unscored
0
CISA KEV
0

Latest apache drill CVEs

Newest publication first

  1. CVE-2019-0201 Access control bypass in Apache ZooKeeper

    Published
    MediumCVSS 5.9 EPSS 9.7%

    An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuth...

  2. CVE-2019-10241 Cross-site Scripting in Eclipse Jetty

    Published
    MediumCVSS 6.1 EPSS 9.4%

    In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory cont...

  3. CVE-2017-12630 Apache Drill vulnerable to Cross-site Scripting

    Published
    MediumCVSS 5.4 EPSS 1.2%

    In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting special script that returns cookie information from Query page, malicious user may...

  4. CVE-2010-5312 Cross-site Scripting in jquery-ui

    Published
    MediumCVSS 6.1 PoC

    Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.