Product by Apache Software Foundation

    Apache Doris

    7 known vulnerabilities in Apache Doris (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Apache Doris (Apache Software Foundation)
    HighCVE-2022-23942

    Apache Doris hardcoded cryptography initialization

    also in 1 other product

    		7.5
    CriticalCVE-2026-58319

    Apache Doris: Improper Authentication in Frontend HTTP API

    also in 1 other product

    		9.1
    CriticalCVE-2023-41313

    Apache Doris: Timing Attack weakness

    also in 1 other product

    		9.8
    CriticalCVE-2024-27438

    Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution

    also in 1 other product

    		9.8
    HighCVE-2023-41314

    Apache Doris: Missing API authentication allowed DoS

    also in 1 other product

    		8.2
    MediumCVE-2024-48019

    Apache Doris: allows admin users to read arbitrary files through the REST API

    also in 1 other product

    		5.4
    MediumCVE-2024-26307

    Apache Doris: Possible race condition

    also in 1 other product

    		5.3

    News

    All products by Apache Software Foundation