Lucene search

Iotdb Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2020-1952

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely.

9.8CVSS

9.5AI Score

0.002EPSS

2020-04-27 05:15 PM

cve

CVE-2023-24831

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4.

9.8CVSS

9.3AI Score

0.015EPSS

2023-04-17 07:15 AM

cve

CVE-2023-46226

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

9.8CVSS

9.7AI Score

0.004EPSS

2024-01-15 11:15 AM

cve

CVE-2023-51656

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue.

9.8CVSS

9.4AI Score

0.037EPSS

2023-12-21 12:15 PM