Iotdb Security Vulnerabilities and Issues — Iotdb CVE List

Lucene search

ApacheIotdb

6 matches found

CVE•added 2020/04/27 5:15 p.m.•95 views

CVE-2020-1952

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely.

9.8CVSS9.5AI score0.01653EPSS

CVE•added 2025/05/14 11:15 a.m.•74 views

CVE-2024-24780

Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI. This issue affects Apache IoTDB: from 1.0.0 before 1.3.4. Users are recommended to upgrade to version 1.3.4, which fixes th...

9.8CVSS7.2AI score0.0036EPSS

CVE•added 2023/12/21 12:15 p.m.•70 views

CVE-2023-51656

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue.

9.8CVSS9.5AI score0.00542EPSS

CVE•added 2024/01/15 11:15 a.m.•69 views

CVE-2023-46226

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue.

9.8CVSS9.8AI score0.05023EPSS

CVE•added 2023/04/17 7:15 a.m.•52 views

CVE-2023-24831

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4.

9.8CVSS9.4AI score0.00123EPSS

CVE•added 2023/04/17 8:15 a.m.•46 views

CVE-2023-30771

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of iotdb-web-wor...

9.8CVSS9.4AI score0.00212EPSS