CVE-2023-25194

🗓️ 26 Aug 2026 22:50:50Reported by KitPloitType

kitploit🔗 kitploit.com👁 3 Views

RCE in Debezium Connect via JNDI injection in SASL JAAS config parameter.

Reporter	Title	Published	Views	Family All 76
zdt	Apache Druid JNDI Injection Remote Code Execution Exploit	27 Jun 202300:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	7 Mar 202303:26	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in kafka-clients-2.8.2.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2023-25194)	1 Feb 202413:37	–	ibm
IBM Security Bulletins	Security Bulletin: z/Transaction Processing Facility is affected by vulnerabilities in the Apache Kafka (kafka-clients) and cryptography packages	9 Mar 202314:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to a code execution vulnerability in Apache Kafka (CVE-2023-25194)	17 May 202321:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to kafka-clients	17 Feb 202604:39	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2023	1 Apr 202314:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for Apache Flink	30 Dec 202513:32	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in kafka-clients-2.8.2.jar used by IBM Maximo Asset Management application (CVE-2023-25194)	1 Feb 202413:36	–	ibm

26 Aug 2026 22:50Current

8High risk

Vulners AI Score8

CVSS 3.18.8

EPSS0.9581

SSVC

Debezium Connect JNDI injection remote code execution SASL JAAS config connector endpoint