Apache Dolphinscheduler Vulnérabilités

Chronologie

Version

3.08
3.17
3.26
2.0.04
2.0.14

Contre-mesures

Official Fix17
Temporary Fix0
Workaround0
Unavailable0
Not Defined1

Exploitabilité

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined18

Vecteur d'accès

Not Defined0
Physical0
Local0
Adjacent12
Network6

Authentification

Not Defined0
High0
Low13
None5

Interaction de l'utilisateur

Not Defined0
Required0
None18

C3BM Index

L'année dernière

CVSSv3 Base

≤10
≤20
≤30
≤45
≤51
≤66
≤73
≤83
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤31
≤44
≤51
≤67
≤73
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤46
≤54
≤64
≤74
≤80
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤51
≤60
≤74
≤82
≤92
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k0
<2k0
<5k1
<10k15
<25k2
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k6
<2k5
<5k6
<10k0
<25k1
<50k0
<100k0
≥100k0

Exploiter le volume du marché

L'année dernière

🔴 CTI Activités

Affected Versions (27): 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 2, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 3, 3.0, 3.0.1, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.1.6, 3.1.7, 3.1.8, 3.1.9, 3.2

Link to Product Website: https://www.apache.org/

Type de logiciel: Social Network Software

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
23/02/20245.55.3Apache DolphinScheduler elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-23320
20/02/20243.53.4Apache DolphinScheduler elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-51770
20/02/20243.13.0Apache DolphinScheduler Password Change authentification faible$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-50270
20/02/20246.36.0Apache DolphinScheduler elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-49109
20/02/20243.73.6Apache DolphinScheduler HTTPS Connection HttpUtils authentification faible$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-49250
29/12/20237.17.0Apache DolphinScheduler elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-49299
30/11/20235.45.3Apache DolphinScheduler Resource Center elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-49620
24/11/20235.95.8Apache DolphinScheduler AbstractAuthenticator.java divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-49068
24/11/20235.95.8Apache DolphinScheduler divulgation de l'information$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-48796
20/04/20235.35.2Apache DolphinScheduler Python Gateway authentification faible$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-25601

8 plus d'entrées ne sont pas affichées

🔒 Login Required

You need to signup and login to see more of the remaining 8 results.

plus d'entrées par Apache

◂ PrécédentAperçuSuivant ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!