IN
Product
Inlong
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 17Medium 9Low 0
Watch
Add Inlong to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63046 | 8.8 | Aug 21 | Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials Affected: 2.0.0 before 2.4.0 |
| CVE-2023-27296 | 8.8 | Mar 27 | Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong Affected: 1.1.0 through 1.5.0 |
| CVE-2022-40955 | 8.8 | Sep 20 | In versions of Apache InLong prior to 1.3.0, an attacker with sufficient privileges to specify MySQL JDBC connection URL parameters and to write arbitrary data to the MySQL… Affected: before 1.3.0 |
| CVE-2026-63042 | 8.1 | Aug 20 | Apache InLong: Missing authorization on DataNode management endpoints Affected: 2.0.0 before 2.4.0 |
| CVE-2026-63040 | 8.1 | Aug 20 | Apache InLong: Missing authorization in StreamSource forceDelete Affected: 2.0.0 before 2.4.0 |
| CVE-2026-63043 | 7.5 | Aug 20 | Apache InLong: Agent path traversal via unvalidated file source path Affected: 2.0.0 before 2.4.0 |
| CVE-2023-51785 | 7.5 | Jan 3 | Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack… Affected: 1.7.0 through 1.9.0 |
| CVE-2023-46227 | 7.5 | Oct 19 | Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong Affected: 1.4.0 before 1.9.0 |
| CVE-2023-43667 | 7.5 | Oct 16 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0… Affected: 1.4.0 through 1.8.0 |
| CVE-2023-34434 | 7.5 | Jul 25 | Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could bypass… Affected: 1.4.0 through 1.7.0 |
| CVE-2023-31103 | 7.5 | May 22 | Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change… Affected: 1.4.0 through 1.6.0 |
| CVE-2023-31064 | 7.5 | May 22 | Files or Directories Accessible to External Parties vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0 Affected: 1.2.0 through 1.6.0 |
| CVE-2023-31454 | 7.5 | May 22 | Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0. The… Affected: 1.2.0 through 1.6.0 |
| CVE-2023-31453 | 7.5 | May 22 | Incorrect Permission Assignment for Critical Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.2.0 through 1.6.0 Affected: 1.2.0 through 1.6.0 |
| CVE-2023-31206 | 7.5 | May 22 | Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the… Affected: 1.4.0 through 1.6.0 |
| CVE-2023-31058 | 7.5 | May 22 | Deserialization of Untrusted Data Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0 Affected: 1.4.0 through 1.6.0 |
| CVE-2023-24977 | 7.5 | Feb 1 | Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache… Affected: 1.1.0 through 1.5.0 |
Showing 17