Apache Software Foundation Apache Iotdb Workbench vulnerabilities

4 vulnerabilities

Known vulnerabilities in Apache Software Foundation Apache Iotdb Workbench, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.3CVE-2024-36448apache software foundationapache iotdb workbench+1
EPSS score
0.70%
** UNSUPPORTED WHEN ASSIGNED ** Server-Side Request Forgery (SSRF) vulnerability in Apache IoTDB Workbench. This issue affects Apache IoTDB Workbench: from 0.13.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.8.8CVE-2023-24829apache software foundationapache iotdb workbench+2
EPSS score
1.24%
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.7.5CVE-2023-24830apache software foundationapache iotdb workbench+3
EPSS score
1.33%
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3.9.8CVE-2023-30771apache software foundationapache iotdb workbench+2
EPSS score
1.45%
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.