Login Request a demo
DO
Product
Dolphinscheduler
by Apache · last CVE Sep 29, 2026
34
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities34In the news0Timeline
Severity mix
Critical 8High 15Medium 11Low 0
Severity
All severities34Critical8High15Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dolphinscheduler to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-32966
9.8
0%
Jun 17
Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure
Affected: before 3.4.2
CVE-2024-43166
9.8
1%
Sep 3
Incorrect Default Permissions vulnerability in Apache DolphinScheduler
Affected: before 3.2.2
CVE-2024-43202
9.8
2%
Aug 20
Exposure of Remote Code Execution in Apache Dolphinscheduler
Affected: 3.0.0 before 3.2.2
CVE-2023-49109
9.8
2%
Feb 20
Exposure of Remote Code Execution in Apache Dolphinscheduler
Affected: 3.0.0 before 3.2.1
CVE-2022-45875
9.8
3%
Jan 4
Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability
Affected: before 3.0.2; 3.1.0
CVE-2022-45462
9.8
3%
Nov 23
Alarm instance management has command injection when there is a specific command configured
Affected: before 2.0.6
CVE-2020-11974
9.8
8%
Dec 18
In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database
Affected: 1.2.0; 1.2.1
CVE-2026-32967
9.1
0%
Jun 17
Apache DolphinScheduler: The `/v2` experimental interface lacks permission checks
Affected: before 3.4.2
Showing 8