Known vulnerabilities in Cassandra
Vendor:
Apache Foundation
Software:
Cassandra
Software CPE:
cpe:2.3:a:apache_foundation:cassandra:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
12
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.0.8
5.0.7
4.1.11
4.0.20
5.0.6
4.0.19
4.1.10
5.0.5
4.0.18
4.1.9
5.0.4
4.0.17
3.11.19
3.0.32
5.0.3
4.1.8
4.0.16
3.11.18
3.0.31
4.0.15
5.0.2
5.0.1
4.1.7
4.0.14
5.0.0
4.1.6
4.0.13
4.1.5
3.11.17
3.0.30
4.1.4
4.0.12
3.11.16
4.1.3
4.0.11
4.1.2
4.0.10
3.0.29
3.11.15
4.0.9
4.1.1
4.0.8
4.1.0
4.0.7
3.11.14
3.0.28
4.0.6
4.0.5
4.0.4
3.11.13
3.0.27
4.0.3
4.0.2
3.11.12
3.0.26
4.0.1
4.0.0
3.11.11
3.0.25
3.11.10
3.0.24
3.11.9
3.0.23
2.2.19
3.11.8
3.11.7
3.11.6
3.11.5
3.11.4
3.11.3
3.11.0
3.5
3.4
3.3
3.2.1
3.2
3.1.1
3.1
3.0.22
3.0.21
3.0.20
3.0.19
3.0.18
3.0.17
3.0.16
3.0.15
3.0.14
3.0.13
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.2.18
2.2.17
2.2.16
2.2.15
2.2.14
2.2.13
2.2.12
2.2.11
2.2.10
2.2.9
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
2.2.1
2.2.0
2.1.22
2.1.21
2.1.20
2.1.19
2.1.18
2.1.17
2.1.16
2.1.15
2.1.14
2.1.13
2.1.12
2.1.9
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.0
2.0.17
2.0.16
2.0.15
2.0.14
2.0.0
1.2.0
1.1.12
1.1.11
1.1.10
1.1.9
1.1.8
1.1.7
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.12
1.0.11
1.0.10
1.0.9
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.8.10
0.8.9
0.8.8
0.8.7
0.8.6
0.8.5
0.8.4
0.8.3
0.8.2
0.8.1
0.8.0
0.7.10
0.7.9
0.7.8
0.7.7
0.7.6
0.7.5
0.7.4
0.7.3
0.7.2
0.7.1
0.7.0
0.6.13
0.6.12
0.6.11
0.6.10
0.6.9
0.6.8
0.6.7
0.6.6
0.6.5
0.6.4
0.6.3
0.6.2
0.6.1
0.6.0
0.5.1
0.5.0
0.4.2
0.4.1
0.4.0
0.3.0
4.0
3.11.2
3.11.1
3.11
3.10
3.9
3.8
3.7
3.6
2.1.3
2.1.2
2.1.1
2.1
2.0.13
2.0.12
2.0.11
2.0.10
2.0.9
2.0.8
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.2.19
1.2.18
1.2.17
1.2.16
1.2.15
1.2.14
1.2.13
1.2.12
1.2.11
1.2.10
1.2.9
1.2.8
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU125100 - Improper Access Control CVE-2026-27314 |
CWE-284 | Low | 5.0.7 | 07.04.2026 |
SB20260407105 SB2026080431 |
||
| #VU125099 - Resource exhaustion CVE-2026-32588 |
CWE-400 | Low | 4.0.20, 4.1.11, 5.0.7 | 07.04.2026 |
SB20260407105 SB2026080431 |
||
| #VU125098 - Cleartext Storage of Sensitive Information CVE-2026-27315 |
CWE-312 | Low | 4.0.20 | 07.04.2026 |
SB20260407105 |
||
| #VU118715 - Privilege Defined With Unsafe Actions CVE-2025-23015 |
CWE-267 | Medium | 3.0.31, 3.11.18, 4.0.16, 4.1.8, 5.0.3 | 24.11.2025 |
SB2025112446 SB2025112459 |
||
| #VU118708 - Improper Authentication CVE-2024-27137 |
CWE-287 | Low | 4.0.15, 4.1.8, 5.0.3 | 24.11.2025 |
SB2025112440 SB2025112459 |
||
| #VU118677 - Incorrect Authorization CVE-2025-24860 |
CWE-863 | Medium | 4.0.16, 4.1.8, 5.0.3 | 21.11.2025 |
SB2025112120 SB2025112459 |
||
| #VU76636 - Improper Privilege Management CVE-2023-30601 |
CWE-269 | Medium | 4.0.10, 4.1.2 | 30.05.2023 |
SB2023053032 SB2023071706 SB2023091125 and 2 more |
||
| #VU60551 - Security Features CVE-2021-44521 |
CWE-254 | Low | 3.0.26, 3.11.12, 4.0.2 | 11.02.2022 |
SB2022021112 SB2022022506 SB2022092339 and 1 more |
||
| #VU50246 - Cleartext Transmission of Sensitive Information CVE-2020-17516 |
CWE-319 | Medium | 3.0.24, 3.11.10 | 02.02.2021 |
SB2021020210 |
||
| #VU46223 - Permissions, Privileges, and Access Controls CVE-2020-13946 |
CWE-264 | Low | 2.1.22, 2.2.18, 3.0.22, 3.11.8 | 02.09.2020 |
SB2020090216 SB2023071340 SB2025112459 |
||
| #VU13826 - Improper input validation CVE-2018-8016 |
CWE-20 | High | 3.11.2, 4.0 | 12.07.2018 |
SB2018071201 |
||
| #VU12876 - Command injection CVE-2015-0225 |
CWE-77 | High | - | 21.05.2018 |
SB2015040101 |