Sploitus

4 exploited vulnerabilities in Apache Flink

Vulnerabilities with publicly known exploits

Vendors
Apache
With known exploits
4
Affected Apache Flink versions
< 1.11.3, 1.20.4, 2.0.2, 2.1.2, 2.2.0, 1.1.5, 1.2.1, 1.3.3, 1.4.2, 1.5.6, 1.6.4, 1.7.2, 1.8.3, 1.9.2, 1.10.0

Vulnerabilities with exploits

Highest CVSS first — 3 of these already have exploit code on Sploitus

CVE-2020-17519 25 exploits
CVSS 9.1 CRITICAL 2021-01-05FIX AVAILABLE
CVE-2026-35194 2 exploits
CVSS 8.1 HIGH 2026-05-15FIX AVAILABLE
CVE-2020-17518 4 exploits
CVSS 7.5 HIGH 2021-01-05FIX AVAILABLE
CVE-2020-1960
CVSS 4.7 MEDIUM 2020-05-14FIX AVAILABLE