Product by Apache Software Foundation

    Apache Doris

    10 known vulnerabilities in Apache Doris (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority.

    Vulnerabilities in Apache Doris (Apache Software Foundation)
    SeverityCVETitleCVSSPublished
    CriticalCVE-2026-58319

    Apache Doris: Improper Authentication in Frontend HTTP API

    		9.1
    CriticalCVE-2023-41313

    Apache Doris: Timing Attack weakness

    		9.8
    HighCVE-2026-72524

    Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables

    		8.8
    CriticalCVE-2024-27438

    Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution

    		9.8
    HighCVE-2026-31377

    Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service

    		7.5
    HighCVE-2023-41314

    Apache Doris: Missing API authentication allowed DoS

    		8.2
    MediumCVE-2026-68570

    Apache Doris: Authorization bypass leading to unauthorized data access

    		6.5
    MediumCVE-2026-96443

    Apache Doris: JDBC driver URL validation bypass leads to remote code execution

    		6.5
    MediumCVE-2024-48019

    Apache Doris: allows admin users to read arbitrary files through the REST API

    		5.4
    MediumCVE-2024-26307

    Apache Doris: Possible race condition

    		5.3

    News

    All products by Apache Software Foundation