2
Total CVEs
0
Critical
2
High
0
Medium
0
Low

Recent CVEs

Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7...

Affected versions: 1.0.0 1.0.1 1.1.0 1.1.1 1.1.2 +16 more

Published: Mar 9, 2026

9.8

CVSS

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue....

Affected versions: 1.0.0 1.0.1 1.1.0 1.1.1 1.1.2 +16 more

Published: Mar 9, 2026

9.8

CVSS

Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0.5. Users are recommended to upgrade to version 2.0.5, which fixes the issue....

Affected versions: 1.0.0 1.0.1 1.1.0 1.1.1 1.1.2 +15 more

Published: Sep 24, 2025

5.3

CVSS

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, which fixes the issue....

Affected versions: 1.3.3 1.3.4 2.0.1 2.0.2 2.0.2-1 +2 more

Published: Sep 24, 2025

7.5

CVSS

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB. This issue affects Apache IoTDB: fr...

Affected versions: 0.10.0 0.10.1 0.11.0 0.11.1 0.11.2 +27 more

Published: May 14, 2025

7.5

CVSS

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 thro...

Affected versions: 0.10.0 0.10.1 0.11.0 0.11.1 0.11.2 +27 more

Published: May 14, 2025

7.5

CVSS

Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI. This issue affects Ap...

Affected versions: 1.0.0 1.0.1 1.1.0 1.1.1 1.1.2 +7 more

Published: May 14, 2025

9.8

CVSS

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue....

Affected versions: 1.0.0 1.0.1 1.1.0 1.1.1 1.1.2 +3 more

Published: Jan 15, 2024

9.8

CVSS