Known vulnerabilities in Apache Pulsar 2.10.0
Vendor:
Apache Foundation
Software:
Apache Pulsar
Version:
2.10.0
Software CPE:
cpe:2.3:a:apache_foundation:pulsar:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
10
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
4.2.4
4.0.13
4.2.3
4.0.12
5.0.0
4.2.2
4.0.11
4.2.1
4.0.10
3.0.17
4.2.0
4.1.3
4.0.9
3.0.16
4.1.2
4.0.8
3.0.15
4.1.1
4.0.7
3.3.9
3.0.14
4.1.0
4.0.6
3.3.8
3.0.13
4.0.5
3.3.7
3.0.12
4.0.4
3.3.6
3.0.11
4.0.3
3.3.5
3.0.10
4.0.2
3.3.4
3.0.9
3.3.3
3.0.8
4.0.1
3.3.2
3.0.7
4.0.0
3.3.1
3.2.4
3.0.6
3.3.0
3.2.3
3.0.5
3.2.2
3.0.4
3.0.3
2.11.4
2.10.6
3.1.3
3.2.1
3.2.0
3.1.2
2.11.3
3.0.2
3.1.1
3.1.0
2.10.5
3.0.1
2.11.2
3.0.0
2.11.1
2.9.5
2.10.4
2.10.3
2.9.4
2.11.0
2.10.2
2.8.4
2.9.3
2.10.1
2.10.0
2.8.3
2.7.5
2.9.2
2.7.4
2.9.1
2.8.2
2.7.2.10
2.7.3.0
2.8.1.0
2.9.0
2.8.1
2.7.3
2.1.1
2.1.0
2.0.1
2.0.0
1.22.1
1.22.0
1.21.0
1.20.0
1.19.0
2.8.0
2.6.4
2.7.2
2.7.1
2.6.3
2.7.0
2.6.2
2.6.1
2.6.0
2.5.2
2.5.1
2.5.0
2.4.2
2.4.1
2.4.0
2.3.2
2.3.1
2.3.0
2.2.1
2.2.0
1.18
1.17.5
1.17.4
1.17.3
1.17.2
1.17.1
1.17
1.16.5
1.16.4
1.16.3
1.16.2
1.16.1
1.16
1.15.7
1.15.6
1.15.5
1.15.4
1.15.3
1.15.2
1.15.1
1.15
1.14
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU88111 - Improper Authorization CVE-2024-29834 |
CWE-285 | Medium | 3.0.4, 3.2.2 | 04.04.2024 |
SB2024040402 SB2024082798 |
||
| #VU87566 - Improper Access Control CVE-2024-28098 |
CWE-284 | Medium | 2.10.6, 2.11.4, 3.0.3, 3.1.3, 3.2.1 | 15.03.2024 |
SB2024031528 SB2024082798 |
||
| #VU87565 - Server-Side Request Forgery (SSRF) CVE-2024-27894 |
CWE-918 | Medium | 2.10.6, 2.11.4, 3.0.3, 3.1.3, 3.2.1 | 15.03.2024 |
SB2024031528 |
||
| #VU87562 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-27317 |
CWE-22 | Medium | 2.10.6, 2.11.4, 3.0.3, 3.1.3, 3.2.1 | 15.03.2024 |
SB2024031528 |
||
| #VU87560 - Improper Control of Generation of Code ('Code Injection') CVE-2024-27135 |
CWE-94 | Medium | 2.10.6, 2.11.4, 3.0.3, 3.1.3, 3.2.1 | 15.03.2024 |
SB2024031528 |
||
| #VU87558 - Missing Authorization CVE-2022-34321 |
CWE-862 | Medium | 2.10.6, 2.11.3, 3.0.2, 3.1.1 | 15.03.2024 |
SB2024031527 |
||
| #VU86330 - Observable discrepancy CVE-2023-51437 |
CWE-203 | High | 2.11.3, 3.0.2, 3.1.1 | 12.02.2024 |
SB2024021210 SB2024032909 |
||
| #VU67595 - Improper Certificate Validation CVE-2022-33683 |
CWE-295 | Medium | 2.7.5, 2.8.4, 2.9.3, 2.10.1 | 22.09.2022 |
SB2022092246 |
||
| #VU67594 - Improper Validation of Certificate with Host Mismatch CVE-2022-33682 |
CWE-297 | Medium | 2.7.5, 2.8.4, 2.9.3, 2.10.1 | 22.09.2022 |
SB2022092246 |
||
| #VU67593 - Improper Validation of Certificate with Host Mismatch CVE-2022-33681 |
CWE-297 | Medium | 2.7.5, 2.8.4, 2.9.3, 2.10.1 | 22.09.2022 |
SB2022092246 SB2023050803 |