Login Request a demo
PU
Product
Pulsar
by Apache · last CVE Apr 9, 2025
20
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 3High 7Medium 10Low 0
Severity
All severities20Critical3High7Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pulsar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-27894
8.8
2%
Mar 12
The Pulsar Functions Worker includes a capability that permits authenticated users to create functions where the function's implementation is referenced by a URL
Affected: 2.4.0 before 2.10.6; 2.11.0 before 2.11.4; 3.0.0 before 3.0.3; 3.1.0 before 3.1.3; 3.2.0
CVE-2023-30429
8.8
1%
Jul 12
Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar
Affected: before 2.10.4; 2.11.0; 2.11.0; 2.11.0
CVE-2022-34321
8.2
2%
Mar 12
Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication
Affected: 2.6.0 before 2.10.6; 2.11.0 before 2.11.3; 3.0.0 before 3.0.2; 3.1.0
CVE-2023-30428
8.1
1%
Jul 12
Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar Broker's Rest Producer allows authenticated user with a custom HTTP header to produce a message…
Affected: 2.9.0 through 2.9.5; 2.10.0 before 2.10.4; 2.11.0; 2.11.0; 2.11.0
CVE-2022-33684
8.1
1%
Nov 4
Apache Pulsar C++/Python OAuth Clients prior to 3.0.0 were vulnerable to an MITM attack due to Disabled Certificate Validation
Affected: through 2.6.4; 2.7.0 before 2.7.5; 2.8.0 before 2.8.4; 2.9.0 before 2.9.3; 2.10.0 before 2.10.2
CVE-2023-37544
7.5
1%
Dec 20
Improper Authentication vulnerability in Apache Pulsar WebSocket Proxy allows an attacker to connect to the /pingpong endpoint without authentication
Affected: before 2.10.5; 2.11.0 before 2.11.2; 3.0.0
CVE-2023-51437
7.4
1%
Feb 7
Observable timing discrepancy vulnerability in Apache Pulsar SASL Authentication Provider can allow an attacker to forge a SASL Role Token that will pass signature verification
Affected: through 2.10.5; 2.11.0 before 2.11.3; 3.0.0 before 3.0.2; 3.1.0; 3.1.0
Showing 7