Approved changes feed: RSS · Atom

cpe:2.3:a:apache_software_foundation:apache_dolphinscheduler:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a)
ProductApache Dolphinscheduler (668f5d82-683e-5822-987b-56be0db6576b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-47340 vulnerable 2026-07-29 00:55:00.121045 Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.
Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.
Published: 2026-06-17T09:00:12.475Z
Updated: 2026-06-17T15:37:28.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-42357 vulnerable 2026-07-29 00:49:31.871880 Apache DolphinScheduler: Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.
Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access. This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue.
Published: 2026-06-17T08:56:55.154Z
Updated: 2026-06-17T15:35:11.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-41280 vulnerable 2026-07-29 00:49:31.138795 Apache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects
Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This issue affects Apache DolphinScheduler versions prior to 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes this issue.
Published: 2026-06-17T08:55:29.988Z
Updated: 2026-06-17T11:06:01.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32967 vulnerable 2026-07-29 00:40:25.683253 Apache DolphinScheduler: The `/v2` experimental interface lacks permission checks
Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.
Published: 2026-06-17T08:57:55.852Z
Updated: 2026-06-17T15:36:12.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32966 vulnerable 2026-07-29 00:40:25.683025 Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure
DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.
Published: 2026-06-17T08:43:11.566Z
Updated: 2026-06-17T15:34:06.325Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23902 vulnerable 2026-06-08 07:51:16.424282 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62233 vulnerable 2026-06-08 07:37:28.929643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62188 vulnerable 2026-06-08 07:37:28.763615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43202 vulnerable 2026-06-08 06:45:49.858551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43166 vulnerable 2026-06-08 06:45:49.732269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43115 vulnerable 2026-06-08 06:45:49.608858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30188 vulnerable 2026-06-08 06:35:29.165210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29831 vulnerable 2026-06-08 06:33:29.420279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23320 vulnerable 2026-06-08 06:29:37.285940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51770 vulnerable 2026-06-08 06:17:53.889980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50270 vulnerable 2026-06-08 06:16:15.877484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49620 vulnerable 2026-06-08 06:14:29.262170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49299 vulnerable 2026-06-08 06:14:28.995334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49250 vulnerable 2026-06-08 06:14:28.885865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49109 vulnerable 2026-06-08 06:14:28.506594 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-49068 vulnerable 2026-06-08 06:14:28.369530 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48796 vulnerable 2026-06-08 06:14:28.173094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25601 vulnerable 2026-06-08 05:56:09.325252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45875 vulnerable 2026-06-08 05:50:37.444356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45462 vulnerable 2026-06-08 05:50:36.418243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34662 vulnerable 2026-06-08 05:46:02.557277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26885 vulnerable 2026-06-08 05:41:54.395542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26884 vulnerable 2026-06-08 05:41:54.395184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25598 vulnerable 2026-06-08 05:41:46.020329 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27644 vulnerable 2026-06-08 05:31:21.999294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13922 vulnerable 2026-06-08 05:18:01.377486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.