Dolphinscheduler

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-43166 CRITICAL PATCH This Week

Incorrect Default Permissions vulnerability in Apache DolphinScheduler.2.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Apache Dolphinscheduler

NVD

CVSS 3.1

9.8

EPSS

0.1%

CVE-2024-43115 HIGH PATCH This Month

Improper Input Validation vulnerability in Apache DolphinScheduler. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Apache Dolphinscheduler

NVD

CVSS 3.1

8.8

EPSS

0.1%

CVE-2024-43166

EPSS 0% CVSS 9.8

CRITICAL PATCH This Week

Privilege Escalation Apache Dolphinscheduler

NVD

CVE-2024-43115

EPSS 0% CVSS 8.8

HIGH PATCH This Month

Improper Input Validation vulnerability in Apache DolphinScheduler. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Apache Dolphinscheduler

NVD