AD
Product
Apache Doris
by Apache Software Foundation · last CVE Sep 23, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 4Low 0
Watch

Add Apache Doris to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-27438
9.8
1%
Mar 21
Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution
Affected: 1.2.0 through 2.0.4
CVE-2023-41313
9.8
1%
Mar 12
Apache Doris: Timing Attack weakness
Affected: before 1.2.8
CVE-2026-58319
9.1
1%
Jul 14
Apache Doris: Improper Authentication in Frontend HTTP API
Affected: 2.1.0 before 3.1.0
Showing 3