Influxdata Influxdb — known CVE vulnerabilities

Every CVE whose affected-product data names Influxdata Influxdb, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-20933 — CVSS 9.8 (critical): InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT…
• CVE-2022-36640 — CVSS 9.8 (critical): influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute…
• CVE-2018-17572 — CVSS 4.8 (medium): InfluxDB 0.9.5 has Reflected XSS in the Write Data module.