Approved changes feed: RSS · Atom

cpe:2.3:a:apache:dolphinscheduler:1.2.0:*:*:*:*:*:*:*

part: a version: 1.2.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductDolphinscheduler (e50278c8-ec59-51a3-8889-26ed41328497)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/dolphinscheduler purl2cpe 2026-06-01 10:14:26.897090
pkg:docker/apache/dolphinscheduler purl2cpe 2026-06-01 10:14:26.897091
pkg:github/apache/dolphinscheduler purl2cpe 2026-06-01 10:14:26.897093
pkg:maven/org.apache.dolphinscheduler/dolphinscheduler purl2cpe 2026-06-01 10:14:26.897094

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13922 vulnerable 2026-06-08 05:18:01.377536 Apache DolphinScheduler (incubating) Permission vulnerability
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.
Published: 2021-01-11T09:40:19.000Z
Updated: 2025-02-13T16:27:28.158Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11974 vulnerable 2026-06-08 05:17:55.902120 Details available
In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database.
Published: 2020-12-18T00:00:00.000Z
Updated: 2024-08-04T11:48:57.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.