Apache · product
Apache DolphinScheduler
46 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 1
Every one of the 46 is a mark on the map. Named now: 1 to 26, most at risk first.
- Apache DolphinScheduler >= 3.1.0, < 3.2.2 Resource File Read And Write
- Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability
- Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin
- Remote Code Execution in Apache Dolphinscheduler
- Apache DolphinScheduler: Remote Code Execution Vulnerability
- Apache DolphinScheduler user registration is vulnerable to ReDoS attacks
- DolphinScheduler mysql jdbc connector parameters deserialize remote code execution
- Apache DolphinScheduler exposes files without authentication
- Apache DolphinScheduler (incubating) Permission vulnerability
- Apache DolphinScheduler prior to 3.0.0 allows path traversal
- Apache DolphinScheduler: Arbitrary js execute as root for authenticated users
- Apache DolphinScheduler: Arbitrary js execution as root for authenticated users
- Apache DolphinScheduler config file read by task risk
- Apache DolphinScheduler: Session do not expire after password change
- Apache DolphinScheduler: Arbitrary File Read Vulnerability
- Apache dolphinscheduler sensitive information disclosure
- Apache DolphinScheduler: RCE by arbitrary js execution
- Apache DolphinScheduler: Authenticated users could delete UDFs in resource center they were not authorized for
- Apache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication
- Apache DolphinScheduler: Information Leakage Vulnerability
- Apache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil
- Apache DolphinScheduler: Alert Script Attack
- Apache DolphinScheduler: General user can mint admin access tokens via /access-tokens
- Apache DolphinScheduler: Users can access sensitive information through the actuator endpoint.
- Apache DolphinScheduler: Deserialization of untrusted data in RPC
- Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.