Login Request a demo
AS
Product
Apache Storm UI
by Apache Software Foundation · last CVE Sep 14, 2026
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities3Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Storm UI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-82433
6.5
0%
Sep 14
Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI
Affected: 3.0.0 before 3.1.0
CVE-2026-84179
6.5
0%
Sep 14
Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology Page
Affected: 3.0.0 before 3.1.0
CVE-2026-35565
5.4
0%
Apr 13
Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UI
Affected: before 2.8.6
Showing 3