Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

Apache Spark Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Published	Severity

`CVE-2026-32773`Apache Spark: XSS Vulnerability in Spark Web 3.5.4	Exploitation statusNot known exploited	FixYes	Published09/02/2026	SeverityMedium
`CVE-2025-54920`Apache Spark: Spark History Server Code Execution Vulnerability	Exploitation statusNot known exploited	FixYes	Published03/14/2026	SeverityHigh
`CVE-2025-55039`Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks	Exploitation statusNot known exploited	FixYes	Published10/15/2025	SeverityMedium
`CVE-2024-23945`Apache Hive, Apache Spark, Apache Spark: CookieSigner exposes the correct signature when message verification fails	Exploitation statusNot known exploited	FixYes	Published12/23/2024	SeverityMedium
`CVE-2023-32007`Apache Spark: Shell command injection via Spark UI	Exploitation statusNot known exploited	FixYes	Published05/02/2023	SeverityHigh
`CVE-2023-22946`Apache Spark proxy-user privilege escalation from malicious configuration class	Exploitation statusNot known exploited	FixYes	Published04/17/2023	SeverityMedium
`CVE-2022-31777`Apache Spark XSS vulnerability in log viewer UI Javascript	Exploitation statusNot known exploited	FixNot confirmed	Published11/01/2022	SeverityMedium
`CVE-2022-33891`Apache Spark shell command injection vulnerability via Spark UI	Exploitation statusKEV	FixNot confirmed	Published07/18/2022	SeverityHigh
`CVE-2021-38296`Apache Spark Key Negotiation Vulnerability	Exploitation statusNot confirmed	FixNot confirmed	Published03/10/2022	SeverityUnknown
`CVE-2020-9480`	Exploitation statusNot confirmed	FixNot confirmed	Published06/23/2020	SeverityUnknown
`CVE-2018-11760`	Exploitation statusNot confirmed	FixNot confirmed	Published02/04/2019	SeverityUnknown
`CVE-2018-17190`	Exploitation statusNot confirmed	FixNot confirmed	Published11/19/2018	SeverityUnknown
`CVE-2018-11804`	Exploitation statusNot confirmed	FixYes	Published10/24/2018	SeverityUnknown
`CVE-2018-11770`	Exploitation statusNot confirmed	FixYes	Published08/13/2018	SeverityUnknown
`CVE-2018-8024`	Exploitation statusNot confirmed	FixNot confirmed	Published07/12/2018	SeverityUnknown
`CVE-2018-1334`	Exploitation statusNot confirmed	FixNot confirmed	Published07/12/2018	SeverityUnknown

16 / 16 Results

All vulnerabilities loaded

Security vulnerabilities in Apache Spark

Apache Spark

How many security vulnerabilities does Apache Spark currently have?

Does the latest version of Apache Spark have any known vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management