apolloconfig records
5 published records for vendor apolloconfig.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 60%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-284 Improper Access Control1
- CWE-285 Improper Authorization1
- CWE-306 Missing Authentication for Critical Function1
- CWE-352 Cross-Site Request Forgery (CSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2023-25570No exploit | Apollo has potential access control security issue in eurekaapolloconfig · apollo · CWE-306 | High7.5 | — | 0.8% | Feb 20, 2023 |
30Monitor | CVE-2024-42662No exploit | An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted request.apolloconfig · apollo | High7.5 | — | 0.5% | Aug 20, 2024 |
22Monitor | CVE-2023-25569No exploit | apollo-portal has potential CSRF issueapolloconfig · apollo · CWE-352 | Medium5.7 | — | 0.3% | Feb 20, 2023 |
17Monitor | CVE-2022-4962No exploit | Apollo Configuration Center users improper authorizationapolloconfig · apollo · CWE-285 | Medium4.3 | — | 0.4% | Jan 12, 2024 |
17Monitor | CVE-2024-43397No exploit | Potential unauthorized access issue in apollo-portalapolloconfig · apollo · CWE-284 | Medium4.3 | — | 0.3% | Aug 20, 2024 |
- CVE-2023-2557030Monitor
Apollo has potential access control security issue in eureka
HighCVSS 7.5No exploitEPSS 0%apolloconfig · apolloFeb 20, 2023
- CVE-2024-4266230Monitor
An issue in apollocongif apollo v.2.2.0 allows a remote attacker to obtain sensitive information via a crafted request.
HighCVSS 7.5No exploitEPSS 0%apolloconfig · apolloAug 20, 2024
- CVE-2023-2556922Monitor
apollo-portal has potential CSRF issue
MediumCVSS 5.7No exploitEPSS 0%apolloconfig · apolloFeb 20, 2023
- CVE-2022-496217Monitor
Apollo Configuration Center users improper authorization
MediumCVSS 4.3No exploitEPSS 0%apolloconfig · apolloJan 12, 2024
- CVE-2024-4339717Monitor
Potential unauthorized access issue in apollo-portal
MediumCVSS 4.3No exploitEPSS 0%apolloconfig · apolloAug 20, 2024