Known vulnerabilities in Apache Pulsar

Software: Apache Pulsar
Software CPE: cpe:2.3:a:apache_foundation:pulsar:*:*:*:*:*:*:*:*
Total vulnerabilities: 21
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Apache Pulsar Apache Pulsar is affected by 21 known vulnerabilities: 4 high, 13 medium, 4 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98024 - Improper input validation
CVE-2024-47561
CWE-20 High
No
No
3.0.7, 3.3.2 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU88111 - Improper Authorization
CVE-2024-29834
CWE-285 Medium
No
No
3.0.4, 3.2.2 04.04.2024 SB2024040402
SB2024082798
#VU87566 - Improper Access Control
CVE-2024-28098
CWE-284 Medium
No
No
2.10.6, 2.11.4, 3.0.3, 3.1.3, 3.2.1 15.03.2024 SB2024031528
SB2024082798
#VU87565 - Server-Side Request Forgery (SSRF)
CVE-2024-27894
CWE-918 Medium
No
No
2.10.6, 2.11.4, 3.0.3, 3.1.3, 3.2.1 15.03.2024 SB2024031528
#VU87562 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-27317
CWE-22 Medium
No
No
2.10.6, 2.11.4, 3.0.3, 3.1.3, 3.2.1 15.03.2024 SB2024031528
#VU87560 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-27135
CWE-94 Medium
No
No
2.10.6, 2.11.4, 3.0.3, 3.1.3, 3.2.1 15.03.2024 SB2024031528
#VU87558 - Missing Authorization
CVE-2022-34321
CWE-862 Medium
No
No
2.10.6, 2.11.3, 3.0.2, 3.1.1 15.03.2024 SB2024031527
#VU86330 - Observable discrepancy
CVE-2023-51437
CWE-203 High
No
No
2.11.3, 3.0.2, 3.1.1 12.02.2024 SB2024021210
SB2024032909
#VU67595 - Improper Certificate Validation
CVE-2022-33683
CWE-295 Medium
No
No
2.7.5, 2.8.4, 2.9.3, 2.10.1 22.09.2022 SB2022092246
#VU67594 - Improper Validation of Certificate with Host Mismatch
CVE-2022-33682
CWE-297 Medium
No
No
2.7.5, 2.8.4, 2.9.3, 2.10.1 22.09.2022 SB2022092246
#VU67593 - Improper Validation of Certificate with Host Mismatch
CVE-2022-33681
CWE-297 Medium
No
No
2.7.5, 2.8.4, 2.9.3, 2.10.1 22.09.2022 SB2022092246
SB2023050803
#VU67592 - Server-Side Request Forgery (SSRF)
CVE-2022-24280
CWE-918 Medium
No
No
2.7.5, 2.8.3, 2.9.2 22.09.2022 SB2022092245
#VU60190 - Improper Access Control
CVE-2021-41571
CWE-284 Low
No
No
2.7.4, 2.8.1 31.01.2022 SB2022013114
#VU54228 - Memory corruption
CVE-2018-12541
CWE-119 Medium
No
No
2.8.0 18.06.2021 SB2018101027
SB2021061815
#VU54227 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-26238
CWE-94 High
No
No
2.8.0 18.06.2021 SB2020112513
SB2021061815
#VU53973 - Improper input validation
CVE-2021-28169
CWE-20 Medium
No
No
2.8.0 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409
CWE-444 Medium
No
No
2.8.0 01.04.2021 SB2021040116
SB2021040626
SB2021050706
and 32 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908
CWE-276 Low
No
No
2.8.0 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU49330 - Insecure Temporary File
CVE-2020-15250
CWE-377 Low
No
No
2.8.0 12.10.2020 SB2020101219
SB2021010712
SB2020110317
and 25 more
#VU12886 - Uncontrolled Memory Allocation
CVE-2018-10237
CWE-789 Low
No
No
2.8.0 21.05.2018 SB2018052310
SB2018083005
SB2018092411
and 43 more


Showing elements 1 - 20 out of 21