Product by Apache Software Foundation
Apache Linkis Basic management services
18 known vulnerabilities in Apache Linkis Basic management services (Apache Software Foundation), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority.
| Severity | CVE | Title | CVSS | Published |
|---|---|---|---|---|
| Critical | CVE-2023-29215 | Apache Linkis JDBC EngineCon has a deserialization command execution | 9.8 | |
| Critical | CVE-2023-29216 | Apache Linkis DatasourceManager module has a deserialization command execution | 9.8 | |
| Critical | CVE-2023-27602 | Apache Linkis publicsercice module unrestricted upload of file | 9.8 | |
| Critical | CVE-2023-27603 | Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue | 9.8 | |
| High | CVE-2022-44645 | Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability | 8.8 | |
| High | CVE-2022-39944 | The Apache Linkis JDBC EngineConn module has a RCE Vulnerability | 8.8 | |
| High | CVE-2023-46801 | Apache Linkis DataSource: DataSource Remote code execution vulnerability | 8.8 | |
| High | CVE-2025-29847 | Apache Linkis: Arbitrary File Read via Double URL Encoding Bypass | 7.5 | |
| High | CVE-2023-49566 | Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability | 8.8 | |
| Critical | CVE-2023-27987 | Apache Linkis gateway module token authentication bypass | 9.1 | |
| Medium | CVE-2022-44644 | Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability | 6.5 | |
| High | CVE-2024-27181 | Apache Linkis Basic management services: Privilege Escalation Attack vulnerability | 8.8 | |
| High | CVE-2024-39928 | Apache Linkis Spark EngineConn: Inadequate Encryption Strength | 7.5 | |
| Medium | CVE-2023-41916 | Apache Linkis DataSource: Files or Directories Accessible to External Parties | 6.5 | |
| Medium | CVE-2023-50740 | Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged | 5.3 | |
| Medium | CVE-2025-59355 | Apache Linkis: Password Exposure | 6.5 | |
| Medium | CVE-2024-27182 | Apache Linkis Basic management services: Files or Directories Accessible to External Parties | 4.9 | |
| Medium | CVE-2024-45627 | Apache Linkis Metadata Query Service JDBC: Files or Directories Accessible to External Parties | 5.9 |