Exposure of Apollo

JavaScript libraries

28

exposure score

28,130

sites use

0

exploited

2

critical

CVEs

13 results

CVE-2020-15170HIGHMissing access control in apollo-adminserviceEPSS 1.3%CVE-2015-10043MEDIUMabreen Apollo path traversalEPSS 0.9%CVE-2023-25570HIGHApollo has potential access control security issue in eurekaEPSS 0.8%CVE-2025-23410CRITICALGMOD Apollo Relative Path TraversalEPSS 0.7%CVE-2026-59955HIGHApollo ConfigService access key authentication bypass via raw config file appId parsingEPSS 0.6%CVE-2026-59954HIGHApollo ConfigService access key authentication bypass via appId parsing and non-canonical matchingEPSS 0.6%CVE-2025-24924CRITICALGMOD Apollo Missing Authentication for Critical FunctionEPSS 0.6%CVE-2022-4962MEDIUMApollo Configuration Center users improper authorizationEPSS 0.5%CVE-2025-32781MEDIUMApollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseIdEPSS 0.4%CVE-2023-25569MEDIUMapollo-portal has potential CSRF issueEPSS 0.4%CVE-2024-43397MEDIUMPotential unauthorized access issue in apollo-portalEPSS 0.3%CVE-2025-20002MEDIUMGMOD Apollo Generation of Error Message Containing Sensitive InformationEPSS 0.3%CVE-2025-21092HIGHGMOD Apollo Incorrect Privilege AssignmentEPSS 0.3%