Apache Jena Fuseki vulnerabilities

2 CVEs affecting Apache Jena Fuseki, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-61372, published 2026-08-03.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-33192, published 2021-07-05. Medium severity, CVSS 6.1. EPSS: 2.9% chance of exploitation in the next 30 days. A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version…
• CVE-2026-61372, published 2026-08-03. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to…