Known vulnerabilities in Apache Doris
Vendor:
Apache Foundation
Software:
Apache Doris
Software CPE:
cpe:2.3:a:apache_foundation:apache_doris:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
7
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
2.0.5
4.1.4.1 rc01
4.0.4
4.0.3
4.0.2
4.0.1
4.0.0
4.1.4
doris flink connector 1.11.6 2.12 1.0.0
doris flink connector 1.12.7 2.12 1.0.0
doris flink connector 1.13.5 2.12 1.0.0
doris spark connector 2.3.4 2.11 1.0.0
doris spark connector 3.1.2 2.12 1.0.0
0.8.2
4.1.4 rc04
4.1.4 rc03
4.1.4 rc02
3.1.0
4.1.4 rc01
4.0.8
4.0.8 rc02
4.0.8 rc01
4.1.3
4.0.7
4.0.7 rc02
4.1.3 rc02
4.1.3 rc01
4.0.7 rc01
4.1.2
4.1.2 rc01
4.1.2 tmp rc03
4.1.2 tmp rc02
4.0.6
4.1.2 tmp rc01
4.0.6 rc02
4.0.6 rc01
4.1.1
4.1.1 rc01
4.1.0
4.1.0 rc03
4.1.0 rc02
4.0.5
4.0.5 rc01
4.1.0 rc01
4.0.4 release
4.0.4 rc01
4.0.3 rc03
4.0.3 rc02
4.0.3 rc01
3.1.4 rc02
3.1.4 rc01
4.0.2 rc02
4.0.2 rc01
3.1.3 rc02
3.1.3 rc01
4.0.1 rc02
4.0.1 rc01
3.1.2 rc01
4.0.0 rc02
3.1.1 rc01
4.0.0 rc01
3.0.8 rc02
3.0.8 rc01
3.1.0 rc01
3.0.7 rc01
2.1.11 rc01
3.0.6.2
3.0.6.1
3.0.6
2.1.10 rc01
3.0.5.1 rc01
3.0.5 rc01
3.0.4 temptable
2.1.9 rc02
3.0.4.1 rc01
2.1.9 rc01
3.0.4 rc02
2.1.8.1
3.0.4 rc01
2.1.8 hotfix1
2.1.8 rc01
3.0.3 rc04
3.0.3 rc03
2.1.7 hotfix1
3.0.3 rc02
3.0.3 rc01
2.0.15.1
2.1.7 rc03
2.1.7 rc02
2.0.16 rc01
2.0.15 tebu 20241010
2.0.15 tebu 20241010 rc02
3.0.2 rc03
2.0.15 rc02
2.0.15 rc01
2.0.15
2.1.7 rc01
2.1.6 rc04
2.1.6 rc03
3.0.2 rc02
3.0.1 rc04
3.0.1 rc03
3.0.1 rc02
2.1.6 rc01
2.0.14
2.1.5 rc02
2.1.5 rc01
3.0.0 rc11
2.0.13
3.0.0 rc10
3.0.0 rc09
3.0.0 rc08
2.0.12
2.1.4 rc03
3.0.0 rc07
2.1.4 rc02
2.1.4 rc01
2.0.11
3.0.0 rc06
3.0.0 rc05
2.1.3 rc09
2.1.3 rc08
2.1.3 rc07
3.0.0 rc04
2.1.3 rc06
2.1.3 rc05
2.1.3 rc04
2.0.10
2.1.3 rc03
2.1.3 rc02
2.1.3 rc01
2.0.9
selectdb doris 2.1.2 xinanzhengquan hotfix1
2.1.2 rc04
2.1.2 rc01
2.0.8
2.1.1 rc05
2.1.1 rc04
2.1.1 rc03
2.1.1 rc02
2.0.7
elodb doris 2.1.0
2.1.1 rc01
2.0.6
2.1.0 release
2.1.0 rc11
2.1.0 rc10
1.2.8 rc01
2.0.5 rc02
2.1.0 rc09
2.1.0 rc08
2.0.5 rc01
2.1.0 rc07
2.1.0 rc06
2.1.0 rc05
2.0.4 rc06
2.1.0 rc04
2.0.4 rc05
2.1.0 rc03
2.0.4 rc04
20240108
2.0.4 rc03
2.1.0 rc01
2.0.4 rc02
2.0.4 rc01
2.0.3 rc06
2.0.3 rc05
2.0.3 rc04 var03
2.0.2.1 rc02
2.0.3 rc04
2.0.3 rc03
2.0.3 rc02
2.0.2.1 rc01
2.0.2.1
2.0.3 rc01
2.0.2 rc05
2.0.2 rc04
2.0.1.1 rc01
1.2.7.1 rc01
2.0.2 rc03
2.0.2 rc02
2.0.2 rc01
1.2.7 rc03
1.2.7 rc02
2.0.1 rc04
2.0.1 rc03
2.0.1 rc02
1.2.7 rc01
2.0.1 rc01
2.0.0 rc04
2.0.0 rc03
2.0.0 rc02
1.2.6 rc03
2.0.0 rc01
1.2.6 rc02
1.1.6 rc01
1.2.6 rc01
2.0 beta
1.2.5 rc01
1.2.4.3
1.2.4.2
2.0.0 alpha1
1.2.4.1 rc01
1.2.4 rc01
1.2.3 rc02
1.2.3 rc01
1.2.2 rc01
1.2.1 rc01
1.1.5 rc02
1.2.0 rc04
1.2.0 rc03
1.2.0 rc02
1.1.5 rc01
1.1.4 rc01
1.2.0 rc01
1.1.3 rc02
1.1.2 rc05
1.1.2 rc04
1.1.2 rc02
1.1.2 rc01
1.1.1 rc03
1.1.1 rc02
1.1.1 rc01
1.1.0 rc05
1.1.0 rc04
1.1.0 rc03
1.1.0 rc02
1.1.0 rc01
1.1.0 preview2
1.1.0 preview1
1.0.0 rc03
1.0.0 rc02
1.0.0 rc01
1.0.0 preview2
1.0.0 preview
0.15.0 rc04
0.15.0 rc03
0.15.0 rc02
0.15.0 rc01
0.14.0 rc06
0.14.0 rc05
0.14.0 rc04
0.14.0 rc03
0.14.0 rc02
0.14.0 rc01
0.14.0
0.13.0 rc03
0.13.0 rc02
0.13.0 rc01
0.12.0 rc03
0.12.0 rc02
0.12.0 rc01
0.11.0 rc01
0.10.0 rc04
0.10.0 rc03
0.9.0 rc02
0.8.1 beta
0.8.0 beta
1.0.0
Vulnerabilities (7)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU151963 - Improper input validation CVE-2026-96443 |
CWE-20 | Low | 4.1.4 rc01 | 24.09.2026 |
SB2026092479 |
||
| #VU151962 - Improper Authentication CVE-2026-31377 |
CWE-287 | Medium | 1.2.1 rc01 | 24.09.2026 |
SB2026092478 |
||
| #VU150000 - Incorrect Authorization CVE-2026-72524 |
CWE-863 | Medium | 4.0.8, 4.1.4 | 15.09.2026 |
SB2026091563 |
||
| #VU149999 - Incorrect Authorization CVE-2026-68570 |
CWE-863 | Low | 4.0.8, 4.1.4 | 15.09.2026 |
SB2026091563 |
||
| #VU144730 - Missing Authentication for Critical Function CVE-2026-58319 |
CWE-306 | High | 3.1.0 | 24.08.2026 |
SB20260824131 |
||
| #VU87325 - Observable discrepancy CVE-2023-41313 |
CWE-203 | Medium | 1.2.8 rc01 | 11.03.2024 |
SB2024031111 |
||
| #VU62651 - Use of Hard-coded Cryptographic Key CVE-2022-23942 |
CWE-321 | Medium | 1.0.0 | 27.04.2022 |
SB2022042712 |