Approved changes feed: RSS · Atom
cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Iotdb (b596d85f-dcd9-504d-99dc-2104d0e7758b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/iotdb |
purl2cpe | 2026-06-01 10:14:29.891596 |
pkg:docker/apache/iotdb |
purl2cpe | 2026-06-01 10:14:29.891597 |
pkg:github/apache/iotdb |
purl2cpe | 2026-06-01 10:14:29.891599 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-24713 |
vulnerable | 2026-06-08 07:51:17.998629 |
Apache IoTDB: JEXL Expression Injection Vulnerability
Improper Input Validation vulnerability in Apache IoTDB.
This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7.
Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue.
Published: 2026-03-09T08:59:59.259Z
Updated: 2026-03-10T17:55:45.832Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-24015 |
vulnerable | 2026-06-08 07:51:16.534386 |
Apache IoTDB: Insecure Default Configuration Vulnerability
A vulnerability in Apache IoTDB.
This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7.
Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue.
Published: 2026-03-09T08:57:45.745Z
Updated: 2026-03-10T17:58:18.381Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48459 |
vulnerable | 2026-06-08 07:27:15.952229 |
Apache IoTDB: Deserialization of untrusted Data
Deserialization of Untrusted Data vulnerability in Apache IoTDB.
This issue affects Apache IoTDB: from 1.0.0 before 2.0.5.
Users are recommended to upgrade to version 2.0.5, which fixes the issue.
Published: 2025-09-24T07:57:24.444Z
Updated: 2025-11-04T21:11:05.598Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48392 |
vulnerable | 2026-06-08 07:27:15.781773 |
Apache IoTDB: DoS Vulnerability
A vulnerability in Apache IoTDB.
This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4.
Users are recommended to upgrade to version 2.0.5, which fixes the issue.
Published: 2025-09-24T07:59:52.592Z
Updated: 2025-11-04T21:11:04.278Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26864 |
vulnerable | 2026-06-08 07:14:50.583312 |
Apache IoTDB: Exposure of Sensitive Information in IoTDB OpenID Authentication
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.
This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2.
Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.
Published: 2025-05-14T10:44:12.712Z
Updated: 2025-05-19T18:41:38.927Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26795 |
vulnerable | 2026-06-08 07:14:50.542027 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24780 |
vulnerable | 2026-06-08 06:29:41.713476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51656 |
vulnerable | 2026-06-08 06:17:53.688179 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46226 |
vulnerable | 2026-06-08 06:12:44.439266 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24831 |
vulnerable | 2026-06-08 05:56:06.293930 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24830 |
vulnerable | 2026-06-08 05:56:06.293589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24829 |
vulnerable | 2026-06-08 05:56:06.293123 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43766 |
vulnerable | 2026-06-08 05:49:33.994443 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25649 |
vulnerable | 2026-06-08 05:22:37.039571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1952 |
vulnerable | 2026-06-08 05:21:03.734692 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.