Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Apache IoTDB — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Apache IoTDB, with AI-generated Chinese analysis, references, and POCs.

Vendor: Apache Software Foundation

CVE IDTitleCVSSSeverityPublished
CVE-2026-24713 Apache IoTDB: JEXL Expression Injection Vulnerability CWE-20 9.1AICriticalAI2026-03-09
CVE-2026-24015 Apache IoTDB: Insecure Default Configuration Vulnerability CWE-1327 9.1AICriticalAI2026-03-09
CVE-2025-48392 Apache IoTDB: DoS Vulnerability 9.8AICriticalAI2025-09-24
CVE-2025-48459 Apache IoTDB: Deserialization of untrusted Data CWE-502 9.8AICriticalAI2025-09-24
CVE-2025-26864 Apache IoTDB: Exposure of Sensitive Information in IoTDB OpenID Authentication CWE-200 7.5AIHighAI2025-05-14
CVE-2024-24780 Apache IoTDB: Remote Code Execution with untrusted URI of User-defined function 8.8AIHighAI2025-05-14
CVE-2023-46226 Apache IoTDB: Remote Code Execution (RCE) risk via the UDF 9.8 -2024-01-15
CVE-2023-51656 Apache IoTDB: Unsafe deserialize map in Sync Tool CWE-502 9.8AICriticalAI2023-12-21
CVE-2023-24831 Apache IoTDB grafana-connector Login Bypass Vulnerability CWE-287 8.8 -2023-04-17
CVE-2022-43766 Apache IoTDB prior to 0.13.3 allows DoS 7.5 -2022-10-26
CVE-2022-38370 No authorization of DatabaseConnectController in grafana-connector. 5.3 -2022-09-05
CVE-2022-38369 Login check vulnerability by session Id 8.1 -2022-09-05

All 12 known CVE vulnerabilities affecting Apache IoTDB with full Chinese analysis, references, and POCs where available.