GCVE - cpe:2.3:a:apache_software_foundation:apache_iotdb_jdbc

Approved changes feed: RSS · Atom

cpe:2.3:a:apache_software_foundation:apache_iotdb_jdbc_driver:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Apache Software Foundation (`f563070d-e18f-561b-b86c-987936937e8a`)
Product	Apache Iotdb Jdbc Driver (`9c2f657f-d797-5006-9b14-42b3b0159195`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-41114`	vulnerable	2026-11-03 10:17:04.687941	Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue. Published: 2026-10-21T11:07:24.947Z Updated: 2026-10-30T17:49:40.907Z Open on db.gcve.eu Reference links https://lists.apache.org/thread.html/tvmqslwyqmglr19dccck1s3rxqypj4zc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-26795`	vulnerable	2026-06-08 07:14:50.541172	Apache IoTDB JDBC driver: Exposure of Sensitive Information in IoTDB JDBC driver Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and 1.3.4, which fix the issue. Published: 2025-05-14T10:43:05.586Z Updated: 2025-05-19T18:43:08.129Z Open on db.gcve.eu Reference links https://lists.apache.org/thread/bj0ytxr5wg0c4jw8xm7rhfd8ogho0r91	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.