org.apache.atlas:atlas-webapp (0.8-incubating) potentially affected by CVE-2025-62198 via org.apache.atlas:atlas-dashboardv2 (0.8-incubating)

org.apache.atlas:atlas-dashboardv2 MAVEN version 0.8-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.atlas:atlas-dashboardv2 and may be impacted: - org.apache.atlas:atlas-webapp 0.8-incubating Source cves: CVE-2025-62198 Source...

org.apache.atlas:atlas-webapp (2.4.0) potentially affected by CVE-2025-62198 via org.apache.atlas:atlas-dashboardv2 (2.4.0)

org.apache.atlas:atlas-dashboardv2 MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.atlas:atlas-dashboardv2 and may be impacted: - org.apache.atlas:atlas-webapp 2.4.0 Source cves: CVE-2025-62198 Source advisory:...

org.apache.atlas:atlas-webapp (>=0.8-incubating, <=2.4.0) potentially affected by CVE-2025-62198 via org.apache.atlas:atlas-dashboardv2 (>=0.8-incubating, <=2.4.0)

org.apache.atlas:atlas-dashboardv2 MAVEN version =0.8-incubating, =0.8-incubating, =2.4.0 Source cves: CVE-2025-62198 Source advisory: MEND:CVE-2025-62198...

org.apache.atlas:atlas-catalog (>=0.8-incubating, <=0.8.4), org.apache.atlas:atlas-index-repair-tool (>=2.2.0, <=2.4.0) +2 more potentially affected by CVE-2026-40563 via org.apache.atlas:atlas-repository (>=0.8-incubating, <=2.4.0)

org.apache.atlas:atlas-repository MAVEN version =0.8-incubating, =0.8-incubating, =2.2.0, =0.8.3, =0.8-incubating, =2.4.0 Source cves: CVE-2026-40563 Source advisory: SNYK:JAVA-ORGAPACHEATLAS-16422860...

org.apache.atlas:atlas-catalog (>=0.8-incubating, <=0.8.4), org.apache.atlas:atlas-index-repair-tool (>=2.2.0, <=2.4.0) +2 more potentially affected by CVE-2026-40563 via org.apache.atlas:atlas-repository (>=0.8-incubating, <=2.4.0)

org.apache.atlas:atlas-repository MAVEN version =0.8-incubating, =0.8-incubating, =2.2.0, =0.8.3, =0.8-incubating, =2.4.0 Source cves: CVE-2026-40563 Source advisory: MEND:CVE-2026-40563...

com.stratio.cassandra:cassandra-lucene-index-plugin (>=2.1.8.1, <=2.1.8.6), org.apache.atlas:atlas-index-repair-tool (>=2.2.0, <=2.4.0) +2 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.1.8)

org.apache.cassandra:cassandra-all MAVEN version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin =2.1.8.1, =2.2.0, =2.2.0, =2.4.0 -...

com.stratio.cassandra:cassandra-lucene-index-plugin (>=2.1.8.1, <=2.1.8.6), org.apache.atlas:atlas-index-repair-tool (>=2.2.0, <=2.4.0) +2 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.1.8)

org.apache.cassandra:cassandra-all MAVEN version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin =2.1.8.1, =2.2.0, =2.2.0, =2.4.0 -...

Information Disclosure

atlas-webapp is vulnerable to information disclosure. The library prints sensitive information in its stack trace error logs. A malicious user can then access sensitive information stored on these logs...

Insecure Cookies

atlas-webapp is vulnerable to insecure cookies. The library uses a predictable cookie name in the webapp. This can allow a malicious user to access sensitive data contained in the cookies...