IN
Product
Inlong
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 17Medium 9Low 0
Watch
Add Inlong to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63039 | 9.8 | Aug 20 | Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService Affected: 2.0.0 before 2.4.0 |
| CVE-2026-63038 | 9.8 | Aug 20 | Apache InLong: SQL Injection via String Concatenation Vulnerability Report Affected: 2.0.0 before 2.4.0 |
| CVE-2026-63037 | 9.8 | Aug 20 | Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint Affected: 2.0.0 before 2.4.0 |
| CVE-2025-27531 | 9.8 | Jun 6 | Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 before 2.1.0, this issue would allow an authenticated attacker… Affected: 1.13.0 before 2.1.0 |
| CVE-2024-36268 | 9.8 | Aug 2 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong Affected: 1.10.0 before 1.13.0 |
| CVE-2024-26579 | 9.8 | May 8 | Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.11.0, the attackers can bypass using malicious… Affected: 1.7.0 before 1.12.0 |
| CVE-2023-51784 | 9.8 | Jan 3 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote… Affected: 1.5.0 before 1.10.0 |
| CVE-2023-43668 | 9.8 | Oct 16 | Authorization Bypass Through User-Controlled Key vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, some sensitive params checks will be… Affected: 1.4.0 through 1.8.0 |
| CVE-2023-35088 | 9.8 | Jul 25 | Improper Neutralization of Special Elements Used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong:… Affected: 1.4.0 through 1.7.0 |
| CVE-2023-31098 | 9.8 | May 22 | Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.6.0. When users change their password… Affected: 1.1.0 through 1.6.0 |
| CVE-2023-31062 | 9.8 | May 22 | Improper Privilege Management Vulnerabilities in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. When the attacker has access… Affected: 1.2.0 through 1.6.0 |
| CVE-2023-24997 | 9.8 | Feb 1 | Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to… Affected: 1.1.0 through 1.5.0 |
| CVE-2025-27528 | 9.1 | May 28 | Deserialization of Untrusted Data vulnerability in Apache InLong Affected: 1.13.0 before 2.2.0 |
| CVE-2024-26580 | 9.1 | Mar 6 | Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.8.0 through 1.10.0, the attackers can use the specific payload to read… Affected: 1.4.0 before 1.11.0 |
| CVE-2023-31066 | 9.1 | May 22 | Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0 Affected: 1.4.0 through 1.6.0 |
| CVE-2023-31065 | 9.1 | May 22 | Insufficient Session Expiration vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. An old session can be used… Affected: 1.4.0 through 1.6.0 |
| CVE-2026-63046 | 8.8 | Aug 21 | Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials Affected: 2.0.0 before 2.4.0 |
| CVE-2023-27296 | 8.8 | Mar 27 | Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong Affected: 1.1.0 through 1.5.0 |
| CVE-2022-40955 | 8.8 | Sep 20 | In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL… Affected: before 1.3.0 |
| CVE-2026-63042 | 8.1 | Aug 20 | Apache InLong: Missing authorization on DataNode management endpoints Affected: 2.0.0 before 2.4.0 |
| CVE-2026-63040 | 8.1 | Aug 20 | Apache InLong: Missing authorization in StreamSource forceDelete Affected: 2.0.0 before 2.4.0 |
| CVE-2026-63043 | 7.5 | Aug 20 | Apache InLong: Agent path traversal via unvalidated file source path Affected: 2.0.0 before 2.4.0 |
| CVE-2023-51785 | 7.5 | Jan 3 | Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack… Affected: 1.7.0 through 1.9.0 |
| CVE-2023-46227 | 7.5 | Oct 19 | Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong Affected: 1.4.0 before 1.9.0 |
| CVE-2023-43667 | 7.5 | Oct 16 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0… Affected: 1.4.0 through 1.8.0 |
| CVE-2023-34434 | 7.5 | Jul 25 | Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could bypass… Affected: 1.4.0 through 1.7.0 |
| CVE-2023-31103 | 7.5 | May 22 | Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change… Affected: 1.4.0 through 1.6.0 |
| CVE-2023-31064 | 7.5 | May 22 | Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0 Affected: 1.2.0 through 1.6.0 |
| CVE-2023-31454 | 7.5 | May 22 | Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. The… Affected: 1.2.0 through 1.6.0 |
| CVE-2023-31453 | 7.5 | May 22 | Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0 Affected: 1.2.0 through 1.6.0 |
| CVE-2023-31206 | 7.5 | May 22 | Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the… Affected: 1.4.0 through 1.6.0 |
| CVE-2023-31058 | 7.5 | May 22 | Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0 Affected: 1.4.0 through 1.6.0 |
| CVE-2023-24977 | 7.5 | Feb 1 | Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache… Affected: 1.1.0 through 1.5.0 |
| CVE-2025-27526 | 6.5 | May 28 | Deserialization of Untrusted Data vulnerability in Apache InLong Affected: 1.13.0 before 2.2.0 |
| CVE-2025-27522 | 6.5 | May 28 | Deserialization of Untrusted Data vulnerability in Apache InLong Affected: 1.13.0 before 2.2.0 |
| CVE-2023-43666 | 6.5 | Oct 16 | Insufficient Verification of Data Authenticity vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, General user can view all user data… Affected: 1.4.0 through 1.8.0 |
| CVE-2023-34189 | 6.5 | Jul 25 | Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0 Affected: 1.4.0 through 1.7.0 |
| CVE-2023-31101 | 6.5 | May 22 | Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.6.0 Affected: 1.5.0; 1.6.0 |
| CVE-2026-63044 | 5.4 | Aug 20 | Apache InLong: Authenticated SSRF via POST /api/node/testConnection Affected: 2.0.0 before 2.4.0 |
| CVE-2026-63016 | 5.3 | Aug 20 | Apache InLong: Ordinary users can create new packages Affected: 2.0.0 before 2.4.0 |
| CVE-2023-30465 | 5.3 | Apr 11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong:… Affected: 1.4.0; 1.5.0 |
| CVE-2026-63015 | 4.3 | Aug 20 | Apache InLong: Non-template responsible persons can view template information Affected: 2.0.0 before 2.4.0 |
Showing 42