Advisories · Technology

Apache Software Foundation Apache Impala.

Every CVE that names Apache Software Foundation Apache Impala among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93684 CVE record

CVSS 5.4 Medium

Apache Impala: Stored XSS in Impala query plans
- Apache Software Foundation Apache Impala
- Cross-site scripting (XSS)
Not analysed yet 7 Oct 2026
CVE-2026-90466 CVE record

CVSS 6.5 Medium

Apache Impala: Path traversal executes JARs outside trusted paths
- Apache Software Foundation Apache Impala
- Path traversal
Not analysed yet 7 Oct 2026
CVE-2026-97720 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Apache Impala: Impala Executor Webserver Auth Bypass
- Apache Software Foundation Apache Impala
- Authentication bypass
Not analysed yet 7 Oct 2026
CVE-2026-65181 CVE record

CVSS 8.1 High

Apache Impala: RCE via External Data Source Class Loading
- Apache Software Foundation Apache Impala
- CWE-913
Not analysed yet 9 Sept 2026
CVE-2026-57866 CVE record

CVSS 8.8 High

Apache Impala: Secrets Exfiltration via SSRF
- Apache Software Foundation Apache Impala
- Server-side request forgery (SSRF)
Not analysed yet 9 Sept 2026
CVE-2026-56207 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Apache Impala: SAML authentication bypass via forged bearer token
- Apache Software Foundation Apache Impala
- Weak cryptography or TLS
Not analysed yet 9 Sept 2026
CVE-2026-54048 CVE record

CVSS 5.3 Medium

Apache Impala: Avro Schema URL Server-Side Request Forgery
- Apache Software Foundation Apache Impala
- Server-side request forgery (SSRF)
Not analysed yet 9 Sept 2026
CVE-2021-28131 CVE record

Impala logs contain secrets
- Apache Software Foundation Apache Impala
- Authentication bypass
Not analysed yet 22 Jul 2021
CVE-2018-11792 CVE record

In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table.
- Apache Software Foundation Apache Impala
Not analysed yet 24 Oct 2018
CVE-2018-11785 CVE record

Apache Software Foundation Apache Impala: Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated…
- Apache Software Foundation Apache Impala
Not analysed yet 24 Oct 2018
CVE-2017-9792 CVE record

Apache Software Foundation Apache Impala: In Apache Impala (incubating) before 2.10.0…
- Apache Software Foundation Apache Impala
Not analysed yet 3 Oct 2017
CVE-2017-5652 CVE record

Apache Software Foundation Apache Impala: During a routine security analysis, it was found that one of the ports in Apache Impala…
- Apache Software Foundation Apache Impala
Not analysed yet 10 Jul 2017
CVE-2017-5640 CVE record

Apache Software Foundation Apache Impala: It was noticed that a malicious process impersonating an Impala daemon in Apache Impala…
- Apache Software Foundation Apache Impala
Not analysed yet 10 Jul 2017