Login Request a demo
DO
Product
Dolphinscheduler
by Apache · last CVE Sep 29, 2026
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities34In the news0Timeline
Severity mix
Critical 8High 15Medium 11Low 0
Severity
All severities34Critical8High15Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dolphinscheduler to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-49050
8.8
1%
Aug 25
Apache DolphinScheduler: General user can mint admin access tokens via /access-tokens
Affected: before 3.4.2
CVE-2024-43115
8.8
1%
Sep 3
Apache DolphinScheduler: Alert Script Attack
Affected: before 3.2.2
CVE-2024-29831
8.8
1%
Aug 9
Apache DolphinScheduler: RCE by arbitrary js execution
Affected: before 3.2.2
CVE-2024-23320
8.8
1%
Feb 23
Apache DolphinScheduler: Arbitrary js execution as root for authenticated users
Affected: before 3.2.1
CVE-2023-49299
8.8
1%
Dec 30
Apache DolphinScheduler: Arbitrary js execute as root for authenticated users
Affected: before 3.1.9
CVE-2021-27644
8.8
2%
Nov 1
In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center
Affected: before 1.3.6
CVE-2026-23902
8.1
0%
Apr 24
Apache DolphinScheduler: Users are able to use tenants that are not defined on the platform during workflow execution.
Affected: before 3.4.1
CVE-2024-30188
8.1
6%
Aug 9
Apache DolphinScheduler: Resource File Read And Write Vulnerability
Affected: 3.1.0 before 3.2.2
CVE-2025-62188
7.5
1%
Apr 9
Apache DolphinScheduler: Users can access sensitive information through the actuator endpoint.
Affected: 3.1.0 before 3.2.0
CVE-2023-51770
7.5
1%
Feb 20
Apache DolphinScheduler: Arbitrary File Read Vulnerability
Affected: 1.2.0 before 3.2.1
CVE-2023-49068
7.5
1%
Nov 27
Apache DolphinScheduler: Information Leakage Vulnerability
Affected: before 3.2.1
CVE-2023-48796
7.5
1%
Nov 24
Apache dolphinscheduler sensitive information disclosure
Affected: 3.0.0 before 3.0.2
CVE-2022-26885
7.5
1%
Nov 24
When using tasks to read config files, there is a risk of database password disclosure
Affected: before 2.0.6
CVE-2022-25598
7.5
2%
Mar 30
Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to version 2.0.5 or…
Affected: before 2.0.5
CVE-2023-49250
7.3
1%
Feb 20
Apache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil
Affected: before 3.2.1
Showing 15