apache kylin

Name: apache kylin
Brand: apache

productUS

cpe:2.3:a:apache:kylin:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical7high3medium0low

updated 2026-10-27

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-1956US	high8.8OT critical	97.4% (100th)	KEV	no fix	2020-05-22	7 versions
CVE-2020-13937US	medium5.3	78.3% (100th)	Exploit	no fix	2020-10-19	23 versions
CVE-2020-13925US	critical9.8	19.9% (97th)	Exploit	3.1.0	2020-07-14	2.3.0 → 3.1.0
CVE-2020-1937US	high8.8	3.07% (88th)	Exploit	no fix	2020-02-24	5 versions
CVE-2021-45456US	critical9.8	88.9% (100th)	—	no fix	2022-01-06	= 4.0.0
CVE-2022-24697US	critical9.8	84.8% (100th)	—	2.6.6	2022-10-13	3 versions
CVE-2022-43396US	high8.8	55.3% (99th)	—	4.0.3	2022-12-30	< 4.0.3
CVE-2025-61734US	—	26.1% (98th)	—	5.0.3	2025-10-02	4.0.0 → 5.0.3
CVE-2022-44621US	critical9.8	3.07% (88th)	—	4.0.3	2022-12-30	< 4.0.3
CVE-2021-31522US	critical9.8	2.90% (87th)	—	3.1.3	2022-01-06	3 versions
CVE-2021-27738US	high7.5	2.56% (85th)	—	3.1.2	2022-01-06	3.0.0 → 3.1.2
CVE-2026-62392US	critical9.8	2.48% (84th)	—	5.0.4	2026-07-14	4.0.0 → 5.0.4
CVE-2021-45457US	high7.5OT elevated	2.38% (84th)	—	3.1.3	2022-01-06	3 versions
CVE-2021-45458US	high7.5OT elevated	2.08% (81st)	—	3.1.3	2022-01-06	3 versions
CVE-2020-13926US	critical9.8	1.95% (80th)	—	3.1.0	2020-07-14	2.0.0 → 3.1.0
CVE-2021-36774US	medium6.5	1.95% (80th)	—	no fix	2022-01-06	2 versions
CVE-2025-61733US	—OT elevated	1.30% (70th)	—	5.0.3	2025-10-02	4.0.0 → 5.0.3
CVE-2023-29055US	high7.5	1.15% (67th)	—	4.0.4	2024-01-29	2.0.0 → 4.0.4
CVE-2025-61735US	—	1.04% (64th)	—	5.0.3	2025-10-02	4.0.0 → 5.0.3
CVE-2025-30067US	—	0.93% (60th)	—	5.0.2	2025-03-27	4.0.0 → 5.0.2
CVE-2026-62390US	critical9.8	0.69% (52nd)	—	5.0.4	2026-07-14	4.0.0 → 5.0.4
CVE-2024-23590US	—	0.67% (52nd)	—	5.0.0	2024-11-04	2.0.0 → 5.0.0
CVE-2024-48944US	—	0.64% (51st)	—	5.0.2	2025-03-27	5.0.0 → 5.0.2
CVE-2026-62393US	medium4.3	0.45% (39th)	—	5.0.4	2026-07-14	4.0.0 → 5.0.4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-184Incomplete List of Disallowed Inputs1 CVEs
CWE-280Improper Handling of Insufficient Permissions or Privileges1 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan