Known vulnerabilities in Apache Doris

Software: Apache Doris
Software CPE: cpe:2.3:a:apache_foundation:apache_doris:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Doris Apache Doris is affected by 7 known vulnerabilities: 1 high, 4 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151963 - Improper input validation
CVE-2026-96443
CWE-20 Low
No
No
4.1.4 rc01 24.09.2026 SB2026092479
#VU151962 - Improper Authentication
CVE-2026-31377
CWE-287 Medium
No
No
1.2.1 rc01 24.09.2026 SB2026092478
#VU150000 - Incorrect Authorization
CVE-2026-72524
CWE-863 Medium
No
No
4.0.8, 4.1.4 15.09.2026 SB2026091563
#VU149999 - Incorrect Authorization
CVE-2026-68570
CWE-863 Low
No
No
4.0.8, 4.1.4 15.09.2026 SB2026091563
#VU144730 - Missing Authentication for Critical Function
CVE-2026-58319
CWE-306 High
No
No
3.1.0 24.08.2026 SB20260824131
#VU87325 - Observable discrepancy
CVE-2023-41313
CWE-203 Medium
No
No
1.2.8 rc01 11.03.2024 SB2024031111
#VU62651 - Use of Hard-coded Cryptographic Key
CVE-2022-23942
CWE-321 Medium
No
No
1.0.0 27.04.2022 SB2022042712