Login Request a demo
AP
Product
appsmith
by appsmithorg · last CVE Jun 24, 2026
19
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 5High 5Medium 8Low 1
Severity
All severities19Critical5High5Medium8Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add appsmith to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-55963
6.5
31%
Mar 26
An issue was discovered in Appsmith before 1.51
Affected: before 1.51
CVE-2024-55965
6.5
0%
Mar 26
An issue was discovered in Appsmith before 1.51
Affected: before 1.51
CVE-2024-51408
6.5
0%
Nov 4
AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credentials
Affected: 1.8.3 before 1.46
CVE-2022-4096
6.5
2%
Nov 21
Server-Side Request Forgery (SSRF) in appsmithorg/appsmith
Affected: before 1.8.2
CVE-2026-7299
5.4
0%
Jun 2
No description published yet
Affected: before 2.1
CVE-2026-34411
5.3
0%
Mar 27
Appsmith < 1.98 Unauthenticated Instance Configuration Disclosure via Management APIs
Affected: before 1.98.0
CVE-2024-55604
4.3
0%
Mar 25
Appsmith's Broken Access Control Allows Viewer Role User to Query Datasources
Affected: before 1.51
CVE-2022-38299
4.3
1%
Sep 12
An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint
Affected: 1.7.11
Showing 8