apache drill

Name: apache drill
Brand: apache

productUS

cpe:2.3:a:apache:drill:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical2high4medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-14439US	high7.5	10.8% (96th)	Exploit	no fix	2019-07-30	= 1.16.0
CVE-2010-5312US	medium6.1	18.4% (97th)	—	no fix	2014-11-24	= 1.16.0
CVE-2019-0201US	medium5.9OT elevated	9.71% (95th)	—	no fix	2019-05-23	= 1.16.0
CVE-2019-10241US	medium6.1	9.37% (95th)	—	no fix	2019-04-22	= 1.16.0
CVE-2017-12630US	medium5.4	1.10% (65th)	—	no fix	2017-12-18	≤ 1.11.0
CVE-2023-48362US	high8.8	0.75% (55th)	—	1.21.2	2024-07-24	1.9.0 → 1.21.2

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-275CWE-2751 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.