HB
Product
Hbase
by Apache · last CVE Jul 24, 2026
6
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 1Low 0
Watch

Add Hbase to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-8025
8.1
2%
Jun 27
CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP
Affected: after 1.0.0 through 2.0.0; 0.92.0
CVE-2019-15544
7.5
4%
Aug 26
An issue was discovered in the protobuf crate before 2.6.0 for Rust
Affected: 2.2.3
CVE-2019-0212
7.5
4%
Mar 28
In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server
Affected: 2.0.0 through 2.0.4; 2.1.0 through 2.1.3
CVE-2015-1836
7.3
7%
Dec 21
Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect…
Affected: 0.98.0; 0.98.1; 0.98.2; 0.98.3; 0.98.4; 0.98.5; +9 more
CVE-2026-49326
6.5
0%
Jul 24
Apache HBase: Missing scanner instance owner check in thrift delegation service
Affected: before 2.5.15; 2.6.0 before 2.6.6; 3.0.0; 3.0.0; 3.0.0; 3.0.0; +1 more
CVE-2013-2193
–
1%
May 29
Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and…
Affected: 0.92.0; 0.92.1; 0.92.2; 0.94.0; 0.94.1; 0.94.2; +7 more
Showing 6