Product by Apache Software Foundation

    Apache Linkis Basic management services

    18 known vulnerabilities in Apache Linkis Basic management services (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Apache Linkis Basic management services (Apache Software Foundation)
    SeverityCVETitleCVSSPublished
    CriticalCVE-2023-29215

    Apache Linkis JDBC EngineCon has a deserialization command execution

    9.8
    CriticalCVE-2023-29216

    Apache Linkis DatasourceManager module has a deserialization command execution

    9.8
    CriticalCVE-2023-27602

    Apache Linkis publicsercice module unrestricted upload of file

    9.8
    CriticalCVE-2023-27603

    Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue

    9.8
    HighCVE-2022-44645

    Apache Linkis (incubating): The DatasourceManager module has a serialization attack vulnerability

    8.8
    HighCVE-2022-39944

    The Apache Linkis JDBC EngineConn module has a RCE Vulnerability

    8.8
    HighCVE-2023-46801

    Apache Linkis DataSource: DataSource Remote code execution vulnerability

    8.8
    HighCVE-2025-29847

    Apache Linkis: Arbitrary File Read via Double URL Encoding Bypass

    7.5
    HighCVE-2023-49566

    Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability

    8.8
    CriticalCVE-2023-27987

    Apache Linkis gateway module token authentication bypass

    9.1
    MediumCVE-2022-44644

    Apache Linkis (incubating): The DatasourceManager module has a Local File Read Vulnerability

    6.5
    HighCVE-2024-27181

    Apache Linkis Basic management services: Privilege Escalation Attack vulnerability

    8.8
    HighCVE-2024-39928

    Apache Linkis Spark EngineConn: Inadequate Encryption Strength

    7.5
    MediumCVE-2023-41916

    Apache Linkis DataSource: Files or Directories Accessible to External Parties

    6.5
    MediumCVE-2023-50740

    Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged

    5.3
    MediumCVE-2025-59355

    Apache Linkis: Password Exposure

    6.5
    MediumCVE-2024-27182

    Apache Linkis Basic management services: Files or Directories Accessible to External Parties

    4.9
    MediumCVE-2024-45627

    Apache Linkis Metadata Query Service JDBC: Files or Directories Accessible to External Parties

    5.9

    All products by Apache Software Foundation