Known vulnerabilities in Apache Dubbo

Software: Apache Dubbo
Software CPE: cpe:2.3:a:apache_foundation:dubbo:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Dubbo Apache Dubbo is affected by 13 known vulnerabilities: 11 high, 2 medium Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73168 - Deserialization of Untrusted Data
CVE-2023-23638
CWE-502 High
Available
No
2.7.22, 3.0.14, 3.1.6 08.03.2023 SB2023030817
#VU68519 - Deserialization of Untrusted Data
CVE-2022-39198
CWE-502 High
No
No
2.7.18, 3.0.12, 3.1.1 19.10.2022 SB2022101998
#VU56449 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-36161
CWE-94 High
No
No
2.7.13 10.09.2021 SB2021091008
#VU56448 - Deserialization of Untrusted Data
CVE-2021-37579
CWE-502 High
No
No
2.7.13, 3.0.2 10.09.2021 SB2021091008
#VU56399 - Deserialization of Untrusted Data
CVE-2021-36163
CWE-502 Medium
No
No
2.6.10.1, 2.7.13 08.09.2021 SB2021090812
#VU56398 - Deserialization of Untrusted Data
CVE-2021-36162
CWE-502 Medium
No
No
2.7.13, 3.0.2 08.09.2021 SB2021090811
#VU53826 - Deserialization of Untrusted Data
CVE-2021-25641
CWE-502 High
Available
No
2.6.9, 2.7.8 06.06.2021 SB2021011119
#VU53678 - Deserialization of Untrusted Data
CWE-502 High
No
No
2.6.10.1 31.05.2021 SB2021053114
#VU50269 - Deserialization of Untrusted Data
CWE-502 High
No
No
2.7.9 03.02.2021 SB2021020302
#VU50268 - Deserialization of Untrusted Data
CWE-502 High
No
No
2.7.9 03.02.2021 SB2021020302
#VU50267 - Deserialization of Untrusted Data
CVE-2020-11995
CWE-502 High
No
No
2.6.9, 2.7.8 11.01.2021 SB2021011119
#VU46195 - Deserialization of Untrusted Data
CVE-2019-17564
CWE-502 High
Available
No
2.6.8, 2.7.5 01.09.2020 SB2020040229
#VU46194 - Deserialization of Untrusted Data
CVE-2020-1948
CWE-502 High
Available
No
2.7.7 01.09.2020 SB20200714100