Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
org.apache.storm:storm-webapp
org.apache.storm:storm-webapp vulnerabilities (Maven)
1 vulnerability.
org.apache.storm:storm-webapp
Maven
Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UI
CVE-2026-35565
Fix available
5.4
Medium
April 13, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open