Login Request a demo
IO
Product
Iotdb
by Apache · last CVE Jul 6, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 9High 10Medium 1Low 0
Severity
All severities20Critical9High10Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Iotdb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24014
9.8
1%
Jul 6
Apache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File Write
Affected: 1.3.3 before 2.0.8
CVE-2026-24713
9.8
1%
Mar 9
Apache IoTDB: JEXL Expression Injection Vulnerability
Affected: 1.0.0 before 1.3.7; 2.0.0 before 2.0.7
CVE-2026-24015
9.8
1%
Mar 9
Apache IoTDB: Insecure Default Configuration Vulnerability
Affected: 1.0.0 before 1.3.7; 2.0.0 before 2.0.7
CVE-2024-24780
9.8
1%
May 14
Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB
Affected: 1.0.0 before 1.3.4
CVE-2023-46226
9.8
2%
Jan 15
Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2
Affected: 1.0.0 before 1.3.0
CVE-2023-51656
9.8
1%
Dec 21
Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4
Affected: 0.13.0 through 0.13.4
CVE-2023-24831
9.8
1%
Apr 17
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3
Affected: 0.13.0 through 0.13.3
CVE-2020-1952
9.8
3%
Apr 27
An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2
Affected: 0.8.0 through 0.8.2; 0.9.0 through 0.9.1
CVE-2026-24013
9.1
1%
Jul 6
Apache IoTDB: Authentication Bypass via Forged SessionID in Thrift RPC
Affected: 1.3.3 before 2.0.8
Showing 9