Apache Software Foundation Apache InLong

• CVE-2026-63046 High 8.8 Apache InLong: Agent Installer — Command Injection to RCE via Default Credentials 0.7%
• CVE-2026-63044 Medium 5.4 Apache InLong: Authenticated SSRF via POST /api/node/testConnection 0.5%
• CVE-2026-63043 High 7.5 Apache InLong: Agent path traversal via unvalidated file source path 0.8%
• CVE-2026-63042 High 8.1 Apache InLong: Missing authorization on DataNode management endpoints 0.6%
• CVE-2026-63040 High 8.1 Apache InLong: Missing authorization in StreamSource forceDelete 0.6%
• CVE-2026-63039 Critical 9.8 Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService 0.7%
• CVE-2026-63038 Critical 9.8 Apache InLong: SQL Injection via String Concatenation Vulnerability Report 0.7%
• CVE-2026-63037 Critical 9.8 Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint 0.7%
• CVE-2026-63016 Medium 5.3 Apache InLong: Ordinary users can create new packages 0.6%
• CVE-2026-63015 Medium 4.3 Apache InLong: Non-template responsible persons can view template information 0.6%
• CVE-2025-27531 Critical 9.8 Apache InLong: An arbitrary file read vulnerability for JDBC 0.8%
• CVE-2025-27528 Critical 9.1 Apache InLong: JDBC Vulnerability for Invisible Character Bypass Leading to Arbitrary File Read 0.9%
• CVE-2025-27526 Medium 6.5 Apache InLong: JDBC Vulnerability For URLEncode and backspace bypass 0.9%
• CVE-2025-27522 Medium 6.5 Apache InLong: JDBC Vulnerability during verification processing 0.9%
• CVE-2024-26579 Critical 9.8 Apache Inlong JDBC Vulnerability 1.1%
• CVE-2024-26580 Critical 9.1 Apache InLong: Logged-in user could exploit an arbitrary file read vulnerability 1.2%
• CVE-2023-51784 Critical 9.8 Apache InLong: Remote Code Execution vulnerability in Apache InLong Manager 1.6%
• CVE-2023-51785 High 7.5 Apache InLong: Arbitrary File Read Vulnerability in Apache InLong Manager 1.0%
• CVE-2023-46227 High 7.5 Apache inlong has an Arbitrary File Read Vulnerability 1.4%
• CVE-2023-43666 Unrated Apache InLong: General user Unauthorized access User Management 0.6%
• CVE-2023-43667 High 7.5 Apache InLong: Log Injection in Global functions 1.7%
• CVE-2023-43668 Unrated Apache InLong: Jdbc Connection Security Bypass in InLong 1.4%
• CVE-2023-35088 Critical 9.8 Apache InLong: SQL injection in audit endpoint 1.6%
• CVE-2023-34434 High 7.5 Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param 1.7%
• CVE-2023-34189 Unrated Apache InLong: General user can delete and update process 1.3%
• CVE-2023-31062 Critical 9.8 Apache InLong: Privilege escalation vulnerability for InLong 1.3%
• CVE-2023-31064 High 7.5 Apache InLong: Insecurity direct object references cancelling applications 1.2%
• CVE-2023-31065 Critical 9.1 Apache InLong: Insufficient Session Expiration in InLong 1.2%
• CVE-2023-31066 Critical 9.1 Apache InLong: Insecure direct object references for inlong sources 1.4%
• CVE-2023-31098 Critical 9.8 Apache InLong: Weak Password Implementation in InLong 1.2%
• CVE-2023-31101 Unrated Apache InLong: Users who joined later can see the data of deleted users 1.1%
• CVE-2023-31103 High 7.5 Apache InLong: Attackers can change the immutable name and type of cluster 1.3%
• CVE-2023-31206 High 7.5 Apache InLong: Attackers can change the immutable name and type of nodes 1.2%
• CVE-2023-31453 High 7.5 Apache InLong: IDOR make users can delete others' subscription 1.2%
• CVE-2023-31454 High 7.5 Apache InLong: IDOR make users can bind any cluster 1.2%
• CVE-2023-31058 High 7.5 Apache InLong: JDBC URL bypassing by adding blanks 1.2%
• CVE-2023-30465 Medium 5.3 Apache InLong: SQL injection in apache inLong 1.5.0 1.2%
• CVE-2023-27296 High 8.8 Apache InLong: JDBC Deserialization Vulnerability in InLong 1.5%
• CVE-2023-24997 Critical 9.8 Apache InLong: Jdbc Connection Security Bypass 1.3%
• CVE-2023-24977 High 7.5 Apache InLong: Jdbc Connection causes arbitrary file reading in InLong 1.2%
• CVE-2022-40955 High 8.8 Deserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBC 2.7%