Known vulnerabilities in Apache InLong

Vendor: Apache Foundation
Software: Apache InLong
Software CPE: cpe:2.3:a:apache_foundation:apache_inlong:*:*:*:*:*:*:*:*
Website: https://www.apache.org
Total vulnerabilities: 32
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache InLong Apache InLong is affected by 32 known vulnerabilities: 5 high, 18 medium, 9 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144850 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-63043		 CWE-22 Medium
No
No
 2.4.0 24.08.2026 SB20260824148
#VU144849 - Server-Side Request Forgery (SSRF)
CVE-2026-63044		 CWE-918 Low
No
No
 2.4.0 24.08.2026 SB20260824148
#VU144848 - Improper Access Control
CVE-2026-63042		 CWE-284 Low
No
No
 2.4.0 24.08.2026 SB20260824148
#VU144847 - Missing Authorization
CVE-2026-63040		 CWE-862 Low
No
No
 2.4.0 24.08.2026 SB20260824148
#VU144846 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-63039		 CWE-89 High
No
No
 2.4.0 24.08.2026 SB20260824148
#VU144845 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-63038		 CWE-89 High
No
No
 2.4.0 24.08.2026 SB20260824148
#VU144844 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-63037		 CWE-89 Medium
No
No
 2.4.0 24.08.2026 SB20260824148
#VU144843 - Improper Access Control
CVE-2026-63016		 CWE-284 Low
No
No
 2.4.0 24.08.2026 SB20260824148
#VU144842 - Improper Access Control
CVE-2026-63015		 CWE-284 Low
No
No
 2.4.0 24.08.2026 SB20260824148
#VU105109 - Deserialization of Untrusted Data
CVE-2025-27531		 CWE-502 Medium
No
No
 2.1.0 28.02.2025 SB2025022804
#VU87321 - Deserialization of Untrusted Data
CVE-2024-26580		 CWE-502 Medium
No
No
 1.11.0 11.03.2024 SB2024031107
#VU84996 - Deserialization of Untrusted Data
CVE-2023-51785		 CWE-502 Medium
No
No
 1.10.0 04.01.2024 SB2024010434
#VU84995 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-51784		 CWE-94 Medium
No
No
 1.10.0 04.01.2024 SB2024010434
#VU78825 - Permissions, Privileges, and Access Controls
CVE-2023-31101		 CWE-264 Low
No
No
 1.7.0 01.08.2023 SB2023080118
#VU78817 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-35088		 CWE-89 Medium
No
No
 1.8.0 01.08.2023 SB2023080120
#VU78816 - Deserialization of Untrusted Data
CVE-2023-34434		 CWE-502 Medium
No
No
 1.8.0 01.08.2023 SB2023080120
#VU78814 - Improper Access Control
CVE-2023-34189		 CWE-284 Medium
No
No
 1.8.0 01.08.2023 SB2023080120
#VU78813 - Exposure of resource to wrong sphere
CVE-2023-31103		 CWE-668 Medium
No
No
 1.7.0 01.08.2023 SB2023080118
#VU78812 - Insufficient Session Expiration
CVE-2023-31065		 CWE-613 Medium
No
No
 1.7.0 01.08.2023 SB2023080118
#VU78811 - Improper Authentication
CVE-2023-31062		 CWE-287 Medium
No
No
 1.7.0 01.08.2023 SB2023080118


Showing elements 1 - 20 out of 32