Security
فارسی
All products

org.apache.cassandra:cassandra-all

Maven · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Cassandra has an authenticated DoS over CQLCVE-2026-32588 · GHSA-QFFM-GF3J-6MVG org.apache.cassandra:cassandra-allRed Hat Data Grid 8/cassandra-all MavenRed Hat Low Fix reported
Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticatorCVE-2026-27314 · GHSA-QXPC-96FQ-WWMG org.apache.cassandra:cassandra-all Maven High Fix reported
Apache Cassandra has sensitive Information Leak in cqlshCVE-2026-27315 · GHSA-FH34-C629-P8XJ org.apache.cassandra:cassandra-all Maven Medium Fix reported
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)CVE-2025-26467 · GHSA-5C4F-PXMX-XCM4 org.apache.cassandra:cassandra-allRed Hat Data Grid 8/cassandra-all MavenRed Hat High Fix reported
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regionsCVE-2025-24860 · GHSA-3CJF-FWCQ-XH22 org.apache.cassandra:cassandra-all Maven Medium Fix reported
Apache Cassandra: unrestricted deserialization of JMX authentication credentialsCVE-2024-27137 · GHSA-RGFX-7P65-3FF4 org.apache.cassandra:cassandra-all Maven Medium Fix reported
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actionsCVE-2025-23015 · GHSA-WMCC-9VCH-JMX4 org.apache.cassandra:cassandra-allRed Hat Data Grid 8/org.apache.cassandra/cassandra-all MavenRed Hat High Fix reported
Missing Authentication for Critical Function in Apache CassandraCVE-2018-8016 · GHSA-52GQ-7J6C-XW6X org.apache.cassandra:cassandra-all Maven Critical Fix reported
Apache Cassandra: Privilege escalation when enabling FQL/Audit logsCVE-2023-30601 · GHSA-M9P2-J4HG-G373 org.apache.cassandra:cassandra-all Maven High Fix reported
Man-in-the-middle attack in Apache CassandraCVE-2020-13946 · GHSA-24WW-MC5X-XC43 org.apache.cassandra:cassandra-allRed Hat Fuse 7/cassandra MavenRed Hat Medium Fix reported
Authentication Bypass in Apache CassandraCVE-2020-17516 · GHSA-2VXM-VP4C-FJFW org.apache.cassandra:cassandra-all Maven High Fix reported
Apache Cassandra vulnerable to Code Injection due to unsafe configurationCVE-2021-44521 · GHSA-8FFC-79XG-29W8 org.apache.cassandra:cassandra-allRed Hat Fuse 7/cassandra MavenRed Hat Critical Fix reported