Apache Software Foundation Cassandra 4.0.0 Beta 1
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:cassandra:4.0.0:beta1:*:*:*:*:*:*
part: a version: 4.0.0 update: beta1
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Cassandra (45b00b93-b127-541c-811d-0444303895fa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/cassandra |
purl2cpe | 2026-06-01 10:14:29.399071 |
pkg:github/apache/cassandra |
purl2cpe | 2026-06-01 10:14:29.399073 |
pkg:maven/org.apache.cassandra/apache-cassandra |
purl2cpe | 2026-06-01 10:14:29.399074 |
pkg:maven/org.apache.cassandra/cassandra |
purl2cpe | 2026-06-01 10:14:29.399076 |
pkg:maven/org.apache.cassandra/cassandra-parent |
purl2cpe | 2026-06-01 10:14:29.399078 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-13946 |
vulnerable | 2026-06-08 05:18:01.574973 |
Details available
In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.
Published: 2020-09-01T20:49:32.000Z
Updated: 2024-08-04T12:32:14.251Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-2684 |
vulnerable | 2026-06-08 05:13:45.194568 |
Details available
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).
Published: 2019-04-23T18:16:44.000Z
Updated: 2024-10-02T15:40:28.315Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-3427 |
vulnerable | 2026-06-08 05:07:45.380726 |
Details available
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
Published: 2016-04-21T10:00:00.000Z
Updated: 2025-10-21T23:55:53.262Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.