Every CVE whose affected-product data names Apache Streampipes, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (7)
CVE-2024-29868 — CVSS 9.1 (critical): Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Apache StreamPipes user self-registration and password…
CVE-2023-31469 — CVSS 8.8 (high): A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a…
CVE-2024-31411 — CVSS 8.8 (high): Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such a dangerous type might be an executable file that…
CVE-2025-47411 — CVSS 8.1 (high): A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that…
CVE-2024-24778 — CVSS 6.5 (medium): Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know…
CVE-2024-31979 — CVSS 4.3 (medium): Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously…
CVE-2024-30471 — CVSS 3.7 (low): Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration. This allows an attacker to…