CA
Product
Cassandra
On CISA KEVExploited in the wild
16
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 6Low 0
Watch
Add Cassandra to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3427 In wildKEV | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability Affected: 2.1.0 before 2.1.22; 2.2.0 before 2.2.18; 3.0.0 before 3.0.22; 3.11.0 before 3.11.8; 4.0.0 |
| CVE-2018-8016 | 9.8 | Jun 28 | The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute… Affected: 3.8 through 3.11.1 |
| CVE-2021-44521 | 9.1 | Feb 11 | When running Apache Cassandra with the following configuration: enable_user_defined_functions: true enable_scripted_user_defined_functions: true… Affected: 3.0.0 before 3.0.26; 3.11.0 before 3.11.12; 4.0.0 before 4.0.2 |
Showing 3