EUVD-2018-0765

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Apache Spark's master can execute code from crafted requests, poses risks if authentication is disabled.

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Apache Spark affects IBM Watson Studio Local	20 Dec 201914:22	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in Apache Spark shipped with IBM Operations Analytics Predictive Insights (CVE-2018-17190)	18 Dec 201805:15	–	ibm
BDU FSTEC	The vulnerability of the Apache Spark framework, related to deficiencies in the authentication process, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	13 Jan 202000:00	–	bdu_fstec
Broadcom	An improper access control vulnerability has been discovered in Apache Spark	29 Aug 202300:00	–	broadcom
Broadcom	Security updates provided in Brocade SANnav v2.2.2a and v2.3.0	29 Aug 202300:00	–	broadcom
CNVD	Apache Spark Remote Code Execution Vulnerability	21 Nov 201800:00	–	cnvd
CVE	CVE-2018-17190	19 Nov 201814:00	–	cve
Cvelist	CVE-2018-17190	19 Nov 201814:00	–	cvelist
Tenable Nessus	GLSA-201903-21 : Apache: Multiple vulnerabilities	28 Mar 201900:00	–	nessus
Github Security Blog	Remote Code Execution in spark-core	21 Nov 201822:19	–	github

[
  {
    "enisaIdVendor": [
      {
        "id": "53652afd-cba7-35f4-9e17-78253556630e",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "5b68f1c4-1710-3663-9490-bbdc4cee5eb7",
        "product": {
          "name": "Apache Spark"
        },
        "product_version": "All versions"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-17190
github	www.github.com/advisories/GHSA-phg2-9c5g-m4q7
lists	www.lists.apache.org/thread.html/341c3187f15cdb0d353261d2bfecf2324d56cb7db1339bfc7b30f6e5@%3Cdev.spark.apache.org%3E
security	www.security.gentoo.org/glsa/201903-21
oracle	www.oracle.com/security-alerts/cpujul2020.html
securityfocus	www.securityfocus.com/bid/105976
lists	www.lists.apache.org/thread.html/341c3187f15cdb0d353261d2bfecf2324d56cb7db1339bfc7b30f6e5%40%3Cdev.spark.apache.org%3E
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

9.3High risk

Vulners AI Score9.3

CVSS 39.8

CVSS 27.5

EPSS0.08721