Login Request a demo
IN
Product
Influxdb
by Influxdata · last CVE Nov 21, 2024
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 3High 0Medium 1Low 0
Severity
All severities4Critical3High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Influxdb to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-36640
9.8
3%
Sep 2
influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands
Affected: before 1.8.0
CVE-2019-20933
9.8
31%
Nov 19
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka…
Affected: before 1.7.6
CVE-2024-30896
9.1
5%
Nov 21
InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization…
Affected: through 2.7.10
CVE-2018-17572
4.8
1%
Mar 2
InfluxDB 0.9.5 has Reflected XSS in the Write Data module
Affected: through 0.9.5
Showing 4