Known vulnerabilities in Apache IoTDB

Software: Apache IoTDB
Software CPE: cpe:2.3:a:apache_foundation:iotdb:*:*:*:*:*:*:*:*
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache IoTDB Apache IoTDB is affected by 15 known vulnerabilities: 2 high, 10 medium, 3 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144835 - Improper input validation
CVE-2026-44630
CWE-20 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144729 - Incorrect Authorization
CVE-2026-40452
CWE-863 Low
No
No
2.0.10 24.08.2026 SB20260824130
#VU144728 - Improper Privilege Management
CVE-2026-40009
CWE-269 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144727 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-40008
CWE-470 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144726 - Uncontrolled Recursion
CVE-2026-40007
CWE-674 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144725 - Allocation of Resources Without Limits or Throttling
CVE-2026-40006
CWE-770 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144723 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-40005
CWE-22 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144722 - Insufficient Session Expiration
CVE-2026-28564
CWE-613 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144717 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24014
CWE-22 Medium
No
No
2.0.8 24.08.2026 SB20260824129
#VU144715 - Improper Authentication
CVE-2026-24013
CWE-287 Medium
No
No
2.0.8 24.08.2026 SB20260824129
#VU144714 - Resource exhaustion
CVE-2026-24012
CWE-400 Medium
No
No
2.0.8 24.08.2026 SB20260824129
#VU85789 - Improper input validation
CVE-2023-46226
CWE-20 High
No
No
1.3.0 25.01.2024 SB2024012511
#VU71662 - Security Features
CVE-2023-24830
CWE-254 Low
No
No
0.13.3 30.01.2023 SB2023013049
#VU71661 - Improper Authorization
CVE-2023-24829
CWE-285 Low
No
No
0.13.3 30.01.2023 SB2023013049
#VU27368 - Improper Authorization
CVE-2020-1952
CWE-285 High
No
No
0.9.2 27.04.2020 SB2020042720