Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,522CVE records
2,874Published, last 7 days
1,726In CISA KEV
1,421Critical, last 30 days
5,599Analysed
20:16 UTCLast NVD sync
Filters Show:
20 results. Apache Iotdb.
Page 1 of 1| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-24014 | Critical | 9.8 |  Apache Iotdb | Improper access control | — | — | 0.69% | Jul 6, 2026 |
| CVE-2026-24013 | Critical | 9.1 | Apache Iotdb | Authentication bypass by spoofing | — | — | 0.64% | Jul 6, 2026 |
| CVE-2026-24012 | High | 7.5 | Apache Iotdb | Uncontrolled resource consumption | — | — | 0.74% | Jul 6, 2026 |
| CVE-2026-24713 | Critical | 9.8 | Apache Iotdb | Improper input validation | — | — | 0.66% | Mar 9, 2026 |
| CVE-2026-24015 | Critical | 9.8 | Apache Iotdb | CWE-1327 | — | — | 0.58% | Mar 9, 2026 |
| CVE-2025-48459 | Medium | 5.3 | Apache Iotdb | Deserialization of untrusted data | — | — | 0.49% | Sep 24, 2025 |
| CVE-2025-48392 | High | 7.5 | Apache Iotdb | Uncontrolled resource consumption | — | — | 0.60% | Sep 24, 2025 |
| CVE-2025-26864 | High | 7.5 | Apache Iotdb | Information exposure | — | — | 0.72% | May 14, 2025 |
| CVE-2025-26795 | High | 7.5 | Apache Iotdb | Information exposure | — | — | 0.72% | May 14, 2025 |
| CVE-2024-24780 | Critical | 9.8 | Apache Iotdb | Code injection | — | — | 1.3% | May 14, 2025 |
| CVE-2023-46226 | Critical | 9.8 | Apache Iotdb | Code injection | — | — | 1.9% | Jan 15, 2024 |
| CVE-2023-51656 | Critical | 9.8 | Apache Iotdb | Deserialization of untrusted data | — | — | 1.0% | Dec 21, 2023 |
| CVE-2023-24831 | Critical | 9.8 | Apache Iotdb | Improper authentication | — | — | 1.2% | Apr 17, 2023 |
| CVE-2023-24829 | High | 8.8 | Apache Iotdb | Incorrect authorization | — | — | 1.2% | Jan 31, 2023 |
| CVE-2023-24830 | High | 7.5 | Apache Iotdb | Improper authentication | — | — | 1.3% | Jan 30, 2023 |
| CVE-2022-43766 | High | 7.5 | Apache Iotdb | Uncontrolled resource consumption | — | — | 1.4% | Oct 26, 2022 |
| CVE-2022-38370 | High | 7.5 | Apache Iotdb | Missing authorization | — | — | 1.3% | Sep 5, 2022 |
| CVE-2022-38369 | High | 8.8 | Apache Iotdb | CWE-384 | — | — | 1.3% | Sep 5, 2022 |
| CVE-2020-25649 | High | 7.5 |  Fasterxml Jackson Databind +38 | XML external entity (XXE) | — | — | 17% | Dec 3, 2020 |
| CVE-2020-1952 | Critical | 9.8 | Apache Iotdb | Improper certificate validation | — | — | 2.7% | Apr 27, 2020 |
