cbcvebase.

Apache Software Foundation Apache Storm Ui vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_storm_ui.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2026-35565P4MEDIUMCVSS 5.4fixed in 2.8.62026-04-13
CVE-2026-35565 [MEDIUM] CWE-79 CVE-2026-35565: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Af Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in parseNode() and parseEdge() without sanitization at any
nvd
Apache Software Foundation Apache Storm Ui vulnerabilities | cvebase