Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache SkyWalking

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-85229

    Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CVE-2025-54057)

    ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to …

    Apache Software Foundation Apache SkyWalking
  • Medium 5.3
    CVE-2026-71216

    Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP

    PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP with a redirect. That does not remove the exposure. The initial POST -- including the JSON body conta…

    Apache Software Foundation Apache SkyWalking
  • Medium 6.1
    CVE-2025-54057

    Apache SkyWalking: Stored XSS vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalking: <= 10.2.0. Users are recommended to upgrade to version 10.3.0, which fixes the issue.

    Apache Software Foundation Apache SkyWalking org.apache.skywalking:apm-webapp Maven