Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Apache Spark — Vulnerabilities & Security Advisories 15

All 15 CVE vulnerabilities found in Apache Spark, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2025-54920 Apache Spark: Spark History Server Code Execution Vulnerability CWE-502 8.8 -2026-03-14
CVE-2025-55039 Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks CWE-347 5.9AIMediumAI2025-10-15
CVE-2023-32007 Apache Spark: Shell command injection via Spark UI CWE-77 8.8 -2023-05-02
CVE-2023-22946 Apache Spark proxy-user privilege escalation from malicious configuration class CWE-269 6.4 Medium2023-04-17
CVE-2022-31777 Apache Spark XSS vulnerability in log viewer UI Javascript CWE-74 5.4 -2022-11-01
CVE-2022-33891 Apache Spark shell command injection vulnerability via Spark UI CWE-78 8.8 -2022-07-18
CVE-2021-38296 Apache Spark Key Negotiation Vulnerability CWE-294 7.5 -2022-03-10
CVE-2020-9480 Apache Spark 访问控制错误漏洞 9.8 -2020-06-23
CVE-2019-10099 Apache Spark 加密问题漏洞 7.5 -2019-08-07
CVE-2018-11760 Apache Spark 访问控制错误漏洞 5.5 -2019-02-04
CVE-2018-17190 Apache Spark 授权问题漏洞 9.8 -2018-11-19
CVE-2018-11804 Apache Spark 输入验证错误漏洞 7.5 -2018-10-24
CVE-2018-11770 Apache Spark 安全漏洞 5.4 -2018-08-13
CVE-2018-1334 Apache Spark 安全漏洞 6.3 -2018-07-12
CVE-2018-8024 Apache Spark 信息泄露漏洞 5.4 -2018-07-12

All 15 known CVE vulnerabilities affecting Apache Spark with full Chinese analysis, references, and POCs where available.