| CVE-2026-96443 |
Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution…
|
Not rated
|
Sep 23, 2026 |
| CVE-2026-31377 |
An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote…
|
7.5
High
|
Sep 23, 2026 |
| CVE-2026-68570 |
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access…
|
Not rated
|
Sep 14, 2026 |
| CVE-2026-72524 |
Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access…
|
Not rated
|
Sep 14, 2026 |
| CVE-2026-58319 |
Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authentication
|
Not rated
|
Jul 14, 2026 |
| CVE-2024-48019 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Files or Directories Accessible to…
|
Not rated
|
Feb 4, 2025 |
| CVE-2024-27438 |
Download of Code Without Integrity Check vulnerability in Apache Doris
|
Not rated
|
Mar 21, 2024 |
| CVE-2024-26307 |
Possible race condition vulnerability in Apache Doris
|
Not rated
|
Mar 21, 2024 |
| CVE-2023-41313 |
The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks
|
Not rated
|
Mar 12, 2024 |
| CVE-2023-41314 |
The api /api/snapshot and /api/get_log_file would allow unauthenticated access
|
Not rated
|
Dec 18, 2023 |