Login Request a demo
IN
Product
Influxdb
by Influxdata · last CVE Sep 2, 2022
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 2High 0Medium 1Low 0
Severity
All severities3Critical2High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Influxdb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-36640
9.8
3%
Sep 2
influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands
Affected: before 1.8.0
CVE-2019-20933
9.8
31%
Nov 19
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka…
Affected: before 1.7.6
CVE-2018-17572
4.8
1%
Mar 2
InfluxDB 0.9.5 has Reflected XSS in the Write Data module
Affected: through 0.9.5
Showing 3