CVSS: 6.1EPSS: 1%CPEs: 6EXPL: 0CVE-2017-3155
https://notcve.org/view.php?id=CVE-2017-3155
29 Aug 2017 — Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting. Apache Atlas en sus versiones 0.6.0-incubating y 0.7.0-incubating es vulnerable a cross frame scripting. • http://www.securityfocus.com/bid/100587 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 1%CPEs: 10EXPL: 0CVE-2016-8752
https://notcve.org/view.php?id=CVE-2016-8752
29 Aug 2017 — Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img. Apache Atlas en sus versiones 0.6.0 (incubating), 0.7.0 (incubating), y 0.7.1 (incubating) permite el acceso al contenido del directorio webapp señalando a URI como /js e /img. • https://lists.apache.org/thread.html/f7435d66b840daa2a38ad1329d639b70f5a9476e7580ae885d422e86%40%3Cdev.atlas.apache.org%3E • CWE-284: Improper Access Control •