| CVE-2026-32588 |
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via…
|
Not rated
|
Apr 7, 2026 |
| CVE-2026-27315 |
Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from…
|
Not rated
|
Apr 7, 2026 |
| CVE-2026-27314 |
Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only…
|
Not rated
|
Apr 7, 2026 |
| CVE-2025-26467 |
Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra
|
Not rated
|
Aug 25, 2025 |
| CVE-2024-27137 |
In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration…
|
Not rated
|
Feb 4, 2025 |
| CVE-2025-24860 |
Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they…
|
Not rated
|
Feb 4, 2025 |
| CVE-2025-23015 |
Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra
|
Not rated
|
Feb 4, 2025 |
| CVE-2023-30601 |
Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user…
|
7.8
High
|
May 30, 2023 |
| CVE-2021-44521 |
When running Apache Cassandra with the following configuration: enable_user_defined_functions: true…
|
Not rated
|
Feb 11, 2022 |
| CVE-2018-8016 |
The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all…
|
Not rated
|
Jun 28, 2018 |