Known vulnerabilities in Apache Dubbo 2.7.12
Vendor:
Apache Foundation
Software:
Apache Dubbo
Version:
2.7.12
Software CPE:
cpe:2.3:a:apache_foundation:dubbo:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
6
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
3.2.20
3.2.19
3.3.6
3.3.5
3.2.18
3.3.4
3.2.17
3.3.3
3.3.2
3.3.1
3.3.0
3.2.16
3.2.15
3.2.14
3.2.13
3.2.11
3.2.10
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.1.11
3.2.4
3.2.3
3.2.2
3.2.1
3.1.10
3.2.0
3.1.9
3.0.15
2.7.23
3.1.8
3.1.7
3.1.6
3.0.14
2.7.22
3.1.5
3.0.13
2.7.21
2.7.20
3.1.4
2.7.19
3.1.3
3.1.2
3.1.1
2.7.18
3.0.12
3.1.0
3.0.11
2.7.17
3.0.10
2.7.16
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
2.7.15
2.6.12
3.0.4
3.0.3
2.7.14
2.6.11
3.0.2.1
3.0.2
2.7.13
3.0.1
3.0.0
2.7.12
2.6.10.1
2.6.10
2.7.11
2.7.10
2.7.9
2.7.8
2.7.7
2.7.6
2.7.5
2.7.4.1
2.7.4
2.7.3
2.7.2
2.7.1
2.7.0
2.6.9
2.6.8
2.6.7
2.6.6
2.6.5
2.6.4
2.6.3
2.6.2
2.6.1
2.6.0
2.5.10
2.5.9
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.4.11
2.4.10
2.4.9
2.4.8
2.4.7
2.4.6
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.7
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.2
2.2.1
2.2.0
2.1.8
2.1.7
2.1.6
2.1.5
2.1.2
2.1.1
2.1.0
2.0.14
2.0.13
2.0.12
2.0.11
2.0.10
2.0.9
2.0.8
2.0.7
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU73168 - Deserialization of Untrusted Data CVE-2023-23638 |
CWE-502 | High | 2.7.22, 3.0.14, 3.1.6 | 08.03.2023 |
SB2023030817 |
||
| #VU68519 - Deserialization of Untrusted Data CVE-2022-39198 |
CWE-502 | High | 2.7.18, 3.0.12, 3.1.1 | 19.10.2022 |
SB2022101998 |
||
| #VU56449 - Improper Control of Generation of Code ('Code Injection') CVE-2021-36161 |
CWE-94 | High | 2.7.13 | 10.09.2021 |
SB2021091008 |
||
| #VU56448 - Deserialization of Untrusted Data CVE-2021-37579 |
CWE-502 | High | 2.7.13, 3.0.2 | 10.09.2021 |
SB2021091008 |
||
| #VU56399 - Deserialization of Untrusted Data CVE-2021-36163 |
CWE-502 | Medium | 2.6.10.1, 2.7.13 | 08.09.2021 |
SB2021090812 |
||
| #VU56398 - Deserialization of Untrusted Data CVE-2021-36162 |
CWE-502 | Medium | 2.7.13, 3.0.2 | 08.09.2021 |
SB2021090811 |