Known vulnerabilities in Apache IoTDB 2.0.9
Vendor:
Apache Foundation
Software:
Apache IoTDB
Version:
2.0.9
Software CPE:
cpe:2.3:a:apache_foundation:iotdb:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Vulnerabilities by Severity
2.0.9
2.0.1
2.0.0
2.0.11
2.0.10
2.0.8
2.0.7
1.3.7
2.0.6
1.3.6
1.3.5
2.0.5
2.0.4
2.0.3
2.0.2
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.2
1.2.1
1.2.0
1.1.2
1.1.1
1.1.0
1.0.1
0.13.4
1.0.0
0.13.3
0.13.2
0.13.1
0.13.0
0.12.6
0.12.5
0.12.4
0.12.3
0.12.2
0.12.1
0.12.0
0.11.4
0.11.3
0.11.2
0.11.1
0.11.0
0.10.1
0.10.0
0.9.3
0.9.2
0.9.1
0.9.0
0.8.2
0.8.1
0.8.0
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU157373 - Incorrect Authorization CVE-2026-59229 |
CWE-863 | Medium | 2.0.11 | 23.10.2026 |
SB2026102313 |
||
| #VU157372 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-59562 |
CWE-22 | High | 2.0.11 | 23.10.2026 |
SB2026102313 |
||
| #VU157371 - Improper Authentication CVE-2026-58663 |
CWE-287 | Medium | 2.0.11 | 23.10.2026 |
SB2026102313 |