com.ericsson.bss.cassandra.ecaudit:ecaudit_c4.0 (>=2.9.0 <=3.1.3), com.ericsson.bss.cassandra.ecaudit:ecaudit_c4.1 (>=3.0.0 <=3.1.0) +46 more potentially affected by CVE-2025-23015 +1 more via org.apache.cassandra:cassandra-all (>=4.0-alpha3 <=4.1.6)

org.apache.cassandra:cassandra-all MAVEN version =4.0-alpha3, =2.9.0, =3.0.0, =1.0.2, =1.1, =1.3 - com.instaclustr:sstable-generator-cassandra-4-0-0 =1.0 - com.instaclustr:sstable-generator-cassandra-4-0-7 =1.0 - com.instaclustr:sstable-generator-cassandra-4-1-0 =1.0 and more Source cves:...

com.baidu.hugegraph:hugegraph-cassandra (>=0.7.4 <=0.11.2), com.baidu.hugegraph:hugegraph-dist (>=0.7.4 <=0.11.2) +97 more potentially affected by CVE-2025-23015 +1 more via org.apache.cassandra:cassandra-all (>=3.10 <=3.11.17)

org.apache.cassandra:cassandra-all MAVEN version =3.10, =0.7.4, =0.7.4, =0.7.4, =0.7.4, =0.7.4, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =3.8.0-bv13, =6.5.13, =6.5.13, =6.5.250 and more Source cves: CVE-2025-23015, CVE-2025-26467 Source advisory:...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c5.0 (>=3.1.0 <=3.1.1) potentially affected by CVE-2024-27137 via org.apache.cassandra:cassandra-all (>=5.0.0 <=5.0.2)

org.apache.cassandra:cassandra-all MAVEN version =5.0.0, =3.1.0, =3.1.1 Source cves: CVE-2024-27137 Source advisory: OSV:GHSA-RGFX-7P65-3FF4...

AZL-56446 CVE-2024-27137 affecting package cassandra 4.0.10-1

In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these...

com.instaclustr:cassandra-ldap-4.1.0 (=1.0.0), com.instaclustr:ic-sstable-tools-4.1.0 (=1.0.0) +12 more potentially affected by CVE-2023-30601 via org.apache.cassandra:cassandra-all (>=4.1.0 <=4.1.10)

org.apache.cassandra:cassandra-all MAVEN version =4.1.0, =4.1.0, =4.1.0, =4.1.0, =1.0-Beta3, =3.15, =3.15, =4.2 - org.odpi.egeria:open-metadata-assemblies =3.15 Source cves: CVE-2023-30601 Source advisory: OSV:GHSA-M9P2-J4HG-G373...

com.datastax.spark:kafka-streaming_2.10 (>=1.1.0-beta2 <=1.1.0-rc3), com.datastax.spark:simple-demos_2.10 (>=1.1.0-beta2 <=1.1.0-rc3) +14 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=2.1.0 <=2.1.11)

org.apache.cassandra:cassandra-all MAVEN version =2.1.0, =1.1.0-beta2, =1.1.0-beta2, =1.1.0-alpha2, =1.1.0-alpha2, =0.80, =0.1.0, =2.1.10.0, =2.11.0, =0.6.2, =0.3.1, =0.3.1, =0.2.6, =0.2.6, =0.2.7 and more Source cves: CVE-2020-13946 Source advisory: OSV:GHSA-24WW-MC5X-XC43...