Known vulnerabilities in Apache IoTDB

Software: Apache IoTDB
Software CPE: cpe:2.3:a:apache_foundation:iotdb:*:*:*:*:*:*:*:*
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache IoTDB Apache IoTDB is affected by 18 known vulnerabilities: 3 high, 12 medium, 3 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU157373 - Incorrect Authorization
CVE-2026-59229
CWE-863 Medium
No
No
2.0.11 23.10.2026 SB2026102313
#VU157372 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59562
CWE-22 High
No
No
2.0.11 23.10.2026 SB2026102313
#VU157371 - Improper Authentication
CVE-2026-58663
CWE-287 Medium
No
No
2.0.11 23.10.2026 SB2026102313
#VU144835 - Improper input validation
CVE-2026-44630
CWE-20 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144729 - Incorrect Authorization
CVE-2026-40452
CWE-863 Low
No
No
2.0.10 24.08.2026 SB20260824130
#VU144728 - Improper Privilege Management
CVE-2026-40009
CWE-269 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144727 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
CVE-2026-40008
CWE-470 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144726 - Uncontrolled Recursion
CVE-2026-40007
CWE-674 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144725 - Allocation of Resources Without Limits or Throttling
CVE-2026-40006
CWE-770 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144723 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-40005
CWE-22 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144722 - Insufficient Session Expiration
CVE-2026-28564
CWE-613 Medium
No
No
2.0.10 24.08.2026 SB20260824130
#VU144717 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-24014
CWE-22 Medium
No
No
2.0.8 24.08.2026 SB20260824129
#VU144715 - Improper Authentication
CVE-2026-24013
CWE-287 Medium
No
No
2.0.8 24.08.2026 SB20260824129
#VU144714 - Resource exhaustion
CVE-2026-24012
CWE-400 Medium
No
No
2.0.8 24.08.2026 SB20260824129
#VU85789 - Improper input validation
CVE-2023-46226
CWE-20 High
No
No
1.3.0 25.01.2024 SB2024012511
#VU71662 - Security Features
CVE-2023-24830
CWE-254 Low
No
No
0.13.3 30.01.2023 SB2023013049
#VU71661 - Improper Authorization
CVE-2023-24829
CWE-285 Low
No
No
0.13.3 30.01.2023 SB2023013049
#VU27368 - Improper Authorization
CVE-2020-1952
CWE-285 High
No
No
0.9.2 27.04.2020 SB2020042720