CVE-2026-24713

>= 1.0.0 and < 1.3.7

Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 bef

9.8CRITICAL

CVE-2026-24015

>= 1.0.0 and < 1.3.7

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are re

9.8CRITICAL

CVE-2025-48459

>= 1.0.0 and < 2.0.5

Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0.5. Users

5.3MEDIUM

CVE-2025-48392

>= 1.3.3 and <= 1.3.4

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users

7.5HIGH

CVE-2025-26864

>= 0.10.0 and < 1.3.4

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the

7.5HIGH

CVE-2025-26795

>= 0.10.0 and < 1.3.4

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apac

7.5HIGH

CVE-2024-24780

>= 1.0.0 and < 1.3.4

Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can r

9.8CRITICAL

CVE-2023-46226

>= 1.0.0 and < 1.3.0

Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommen

9.8CRITICAL

CVE-2023-51656

>= 0.13.0 and <= 0.13.4

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. User

9.8CRITICAL

CVE-2023-24831

>= 0.13.0 and <= 0.13.3

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector

9.8CRITICAL

CVE-2023-24829

>= 0.13.0 and < 0.13.3

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench compon

8.8HIGH

CVE-2023-24830

>= 0.13.0 and < 0.13.3

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component:

7.5HIGH

CVE-2022-43766

>= 0.12.2 and <= 0.12.6

Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patt

7.5HIGH

CVE-2022-38370

all versions

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure

7.5HIGH

CVE-2022-38369

all versions

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.

8.8HIGH

CVE-2020-25649

< 0.12.0

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerab

7.5HIGH

CVE-2020-1952

>= 0.8.0 and <= 0.8.2

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no ce

9.8CRITICAL