GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, apache-activemq-artemis, sonar-scanner-cli, confluent-kafka, apache-nifi, nrjmx, thingsboard, dependency-track, cassandra-reaper, gradle, solr, apache-tika, druid, keycloak-config-cli, airflow, spdx-tools-java, sonarqube,...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: neo4j, debezium-connector-spanner, infinispan, management-api-for-apache-cassandra-5.0, spark, hadoop-fips, apache-nifi-registry, hadoop-client-modules, nrjmx, spdx-tools-java, py3-vllm-cuda-12.4, maven-stage0, cassandra-reaper, apache-activemq-artemis, airflow,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: neo4j, debezium-connector-spanner, infinispan, management-api-for-apache-cassandra-5.0, spark, hadoop-fips, apache-nifi-registry, hadoop-client-modules, nrjmx, spdx-tools-java, py3-vllm-cuda-12.4, maven-stage0, cassandra-reaper, apache-activemq-artemis, airflow,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: gradle-stage0, scala, cassandra-reaper, tez, spark, druid, confluent-common-docker, cassandra...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: gradle-stage0, scala, cassandra-reaper, tez, spark, druid, confluent-common-docker, cassandra...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: druid, elasticsearch, localstack, hadoop-fips, spark, hadoop-client-modules, gradle-stage0, tez, cassandra, spark-fips, scala, confluent-common-docker, cassandra-reaper, celeborn, cassandra-fips...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: druid, elasticsearch, localstack, hadoop-fips, spark, hadoop-client-modules, gradle-stage0, tez, cassandra, spark-fips, scala, confluent-common-docker, cassandra-reaper, celeborn, cassandra-fips...

The vulnerability of the distributed database management system Apache Cassandra, related to improper handling of privileges, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the distributed database management system Apache Cassandra is related to improper handling of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: akhq, celeborn, strimzi-kafka-operator, trino, apache-activemq-artemis, cassandra-reaper, jenkins-plugin-manager, opensearch, tez, wildfly, spdx-tools-java, apache-nifi, confluent-common-docker, druid, sonarqube, jenkins, apicurio-registry...

GHSA-WXR5-93PH-8WR9 vulnerabilities

Vulnerabilities for packages: akhq, celeborn, strimzi-kafka-operator, trino, apache-activemq-artemis, cassandra-reaper, jenkins-plugin-manager, opensearch, tez, wildfly, spdx-tools-java, apache-nifi, confluent-common-docker, druid, sonarqube, jenkins, apicurio-registry...

CVE-2025-48734 vulnerabilities

Vulnerabilities for packages: neo4j, hadoop-client-modules, spdx-tools-java, confluent-common-docker, cassandra-reaper, apache-activemq-artemis, druid, confluent-kafka-jre-bcfips, opensearch, tez, wildfly, kafka, sonarqube, apache-nifi, jenkins, strimzi-kafka-operator, apicurio-registry, trino,...

CVE-2023-30601

Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1. WORKAROUND The vulnerability requires nodetool/JMX access to be...

GHSA-Q4RV-GQ96-W7C5 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, celeborn, spark-fips...

CVE-2024-13009 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, celeborn, spark-fips...

CVE-2024-13009 vulnerabilities

Vulnerabilities for packages: cassandra-reaper...

GHSA-Q4RV-GQ96-W7C5 vulnerabilities

Vulnerabilities for packages: cassandra-reaper...

GHSA-J6M3-GC37-6R6Q vulnerabilities

Vulnerabilities for packages: nri-prometheus, src-fingerprint, govulncheck, wire-go, kubevela, wazero, gobuster, kubewatch, eksctl, gomplate, helm-push, aws-flb-kinesis, helm, nats, kor, kustomize, nri-f5, litefs, terraform-docs, dockerize, kubernetes-dashboard-metrics-scraper, supercronic, dive,...

BIT-CASSANDRA-2024-27137 Apache Cassandra: unrestricted deserialization of JMX authentication credentials

In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these...

Apache Cassandra Authorization Issues Vulnerability

Apache Cassandra is a distributed Nosql database from the American Apache Apache Foundation. Apache Cassandra suffers from an authorization issue vulnerability that stems from the inclusion of an incorrect authorization, which can be exploited by an attacker to access a datacenter or IP/CIDR grou...

CVE-2025-26511

Systems running the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0 through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into Apache Cassandra version 4.x, are susceptible to a vulnerability which when successfully exploited could allow...