Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Iotdb
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-51656 1 Apache 1 Iotdb 2024-01-02 N/A 9.8 CRITICAL
Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue.
CVE-2020-1952 1 Apache 1 Iotdb 2020-05-04 7.5 HIGH 9.8 CRITICAL
An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely.