Product

org.apache.skywalking/oap-server vulnerabilities

1 published CVE affecting org.apache.skywalking/oap-server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 1
High: 0
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.apache.skywalking/oap-server CVEs

Newest publication first

CVE-2020-13921 SQL Injection in Apache SkyWalking
Published 2020-08-05

CriticalCVSS 9.8 EPSS 33.5%

Resolved Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.apache.skywalking/oap-server vulnerabilities

Latest org.apache.skywalking/oap-server CVEs

CVE-2020-13921 SQL Injection in Apache SkyWalking