Vulnerabilities > Apache > Atlas > 0.7.1

DATE CVE VULNERABILITY TITLE RISK
2020-09-16 CVE-2020-13928 Cross-site Scripting vulnerability in Apache Atlas
Apache Atlas before 2.1.0 contain a XSS vulnerability.
network
low complexity
apache CWE-79
6.1
6.1
2017-08-29 CVE-2016-8752 Improper Access Control vulnerability in Apache Atlas 0.6.0/0.7.0/0.7.1
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.
network
low complexity
apache CWE-284
7.5
7.5