AD
Product
Apache Doris
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 4Low 0
Watch
Add Apache Doris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-96443 | 6.5 | Sep 23 | Apache Doris: JDBC driver URL validation bypass leads to remote code execution Affected: 2.0.5 through 4.1.3 |
| CVE-2026-68570 | 6.5 | Sep 14 | Apache Doris: Authorization bypass leading to unauthorized data access Affected: 2.0.0 through 2.1.*; 3.0.0 through 3.0.*; 4.0.0 before 4.0.8; 4.1.0 before 4.1.4 |
| CVE-2024-48019 | 5.4 | Feb 4 | Apache Doris: allows admin users to read arbitrary files through the REST API Affected: 2.1.0 before 2.1.8; 3.0.0 before 3.0.3 |
| CVE-2024-26307 | 5.3 | Mar 21 | Apache Doris: Possible race condition Affected: before 1.2.8; before 2.0.4 |
Showing 4