Apache Cassandra
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-17516 | 2.1.0 to 2.1.22 ; 2.2.0 to 2.2.19 ; 3.0.0 to 3.0.23 ; … | Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encry | HIGH 7.5 | 2.0 % | ||
| CVE-2020-13946 | All versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2 | In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access | MEDIUM 5.9 | 3.0 % |