Login Request a demo
AD
Product
Apache Doris
by Apache Software Foundation · last CVE Sep 23, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 3High 3Medium 4Low 0
Severity
All severities10Critical3High3Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Apache Doris to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-27438
9.8
1%
Mar 21
Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution
Affected: 1.2.0 through 2.0.4
CVE-2023-41313
9.8
1%
Mar 12
Apache Doris: Timing Attack weakness
Affected: before 1.2.8
CVE-2026-58319
9.1
1%
Jul 14
Apache Doris: Improper Authentication in Frontend HTTP API
Affected: 2.1.0 before 3.1.0
CVE-2026-72524
8.8
0%
Sep 14
Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables
Affected: 3.1.0 through 3.1.*; 4.0.0 through 4.0.7; 4.1.0 through 4.1.3
CVE-2023-41314
8.2
1%
Dec 18
Apache Doris: Missing API authentication allowed DoS
Affected: 1.2.0 through 2.0.3
CVE-2026-31377
7.5
1%
Sep 23
Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service
Affected: 2.0.0 before 4.0.8; 4.1.0 before 4.1.4
CVE-2026-96443
6.5
0%
Sep 23
Apache Doris: JDBC driver URL validation bypass leads to remote code execution
Affected: 2.0.5 through 4.1.3
CVE-2026-68570
6.5
0%
Sep 14
Apache Doris: Authorization bypass leading to unauthorized data access
Affected: 2.0.0 through 2.1.*; 3.0.0 through 3.0.*; 4.0.0 before 4.0.8; 4.1.0 before 4.1.4
CVE-2024-48019
5.4
1%
Feb 4
Apache Doris: allows admin users to read arbitrary files through the REST API
Affected: 2.1.0 before 2.1.8; 3.0.0 before 3.0.3
CVE-2024-26307
5.3
0%
Mar 21
Apache Doris: Possible race condition
Affected: before 1.2.8; before 2.0.4
Showing 10