Known vulnerabilities in Apache DolphinScheduler

Software CPE: cpe:2.3:a:apache_foundation:dolphinscheduler:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache DolphinScheduler Apache DolphinScheduler is affected by 23 known vulnerabilities: 2 high, 13 medium, 8 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145331 - Deserialization of Untrusted Data
CVE-2025-62233
CWE-502 Medium
No
No
3.3.1 25.08.2026 SB20260825107
#VU145330 - Improper Access Control
CVE-2026-23902
CWE-284 Low
No
No
3.4.1 25.08.2026 SB20260825106
#VU145237 - Incorrect Authorization
CVE-2026-41280
CWE-863 Low
No
No
3.4.2 25.08.2026 SB2026082573
#VU145236 - Improper Access Control
CVE-2026-49050
CWE-284 Medium
No
No
3.4.2 25.08.2026 SB2026082573
#VU145235 - Improper Access Control
CVE-2026-47340
CWE-284 Low
No
No
3.4.2 25.08.2026 SB2026082573
#VU145234 - Incorrect Authorization
CVE-2026-42357
CWE-863 Low
No
No
3.4.2 25.08.2026 SB2026082573
#VU145233 - Incorrect Authorization
CVE-2026-32967
CWE-863 Low
No
No
3.4.2 25.08.2026 SB2026082573
#VU145232 - Missing Authorization
CVE-2026-32966
CWE-862 Low
No
No
3.4.2 25.08.2026 SB2026082573
#VU118825 - Exposure of sensitive information to an unauthorized actor
CVE-2023-48796
CWE-200 Medium
No
No
3.0.2, 3.2.0 28.11.2025 SB2025112811
#VU96234 - Use of Potentially Dangerous Function
CVE-2024-43202
CWE-676 High
No
No
3.2.2 20.08.2024 SB2024082011
#VU96233 - Permissions, Privileges, and Access Controls
CVE-2024-30188
CWE-264 Medium
No
No
3.2.2 20.08.2024 SB2024082011
#VU96231 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-29831
CWE-94 Medium
No
No
3.2.2 20.08.2024 SB2024082011
#VU86889 - Improper input validation
CVE-2024-23320
CWE-20 Medium
No
No
3.2.1 28.02.2024 SB2024022821
#VU86652 - Improper Certificate Validation
CVE-2023-49250
CWE-295 Medium
No
No
3.2.1 20.02.2024 SB2024022044
#VU86651 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-51770
CWE-22 Medium
No
No
3.2.1 20.02.2024 SB2024022044
#VU86650 - Session Fixation
CVE-2023-50270
CWE-384 Low
No
No
3.2.1 20.02.2024 SB2024022044
#VU86649 - Improper input validation
CVE-2023-49109
CWE-20 High
No
No
3.2.1 20.02.2024 SB2024022044
#VU86015 - Improper Authentication
CVE-2023-25601
CWE-287 Medium
No
No
3.0.3, 3.1.2 01.02.2024 SB2023042055
#VU84881 - Improper input validation
CVE-2023-49299
CWE-20 Medium
No
No
- 29.12.2023 SB2023122919
#VU83443 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-45875
CWE-78 Medium
No
No
3.0.2, 3.1.1 22.11.2023 SB2023010450


Showing elements 1 - 20 out of 23