AI
Product
Apache InLong
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 15Medium 9Low 0
Watch
Add Apache InLong to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-63046 | 8.8 | Aug 21 | Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials Affected: 2.0.0 before 2.4.0 |
| CVE-2023-27296 | 8.8 | Mar 27 | Apache InLong: JDBC Deserialization Vulnerability in InLong Affected: 1.1.0 through 1.5.0 |
| CVE-2026-63042 | 8.1 | Aug 20 | Apache InLong: Missing authorization on DataNode management endpoints Affected: 2.0.0 before 2.4.0 |
| CVE-2026-63040 | 8.1 | Aug 20 | Apache InLong: Missing authorization in StreamSource forceDelete Affected: 2.0.0 before 2.4.0 |
| CVE-2026-63043 | 7.5 | Aug 20 | Apache InLong: Agent path traversal via unvalidated file source path Affected: 2.0.0 before 2.4.0 |
| CVE-2023-51785 | 7.5 | Jan 3 | Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager Affected: 1.7.0 through 1.9.0 |
| CVE-2023-46227 | 7.5 | Oct 19 | Apache inlong has an Arbitrary File Read Vulnerability Affected: 1.4.0 through 1.8.0 |
| CVE-2023-43667 | 7.5 | Oct 16 | Apache InLong: Log Injection in Global functions Affected: 1.4.0 through 1.8.0 |
| CVE-2023-34434 | 7.5 | Jul 25 | Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param Affected: 1.4.0 through 1.7.0 |
| CVE-2023-31064 | 7.5 | May 22 | Apache InLong: Insecurity direct object references cancelling applications Affected: 1.2.0 through 1.6.0 |
| CVE-2023-31103 | 7.5 | May 22 | Apache InLong: Attackers can change the immutable name and type of cluster Affected: 1.4.0 through 1.6.0 |
| CVE-2023-31206 | 7.5 | May 22 | Apache InLong: Attackers can change the immutable name and type of nodes Affected: 1.4.0 through 1.6.0 |
| CVE-2023-31453 | 7.5 | May 22 | Apache InLong: IDOR make users can delete others' subscription Affected: 1.2.0 through 1.6.0 |
| CVE-2023-31454 | 7.5 | May 22 | Apache InLong: IDOR make users can bind any cluster Affected: 1.2.0 through 1.6.0 |
| CVE-2023-31058 | 7.5 | May 22 | Apache InLong: JDBC URL bypassing by adding blanks Affected: 1.4.0 through 1.6.0 |
Showing 15