Skip to content

Product

org.apache.hbase/hbase vulnerabilities

2 published CVES affecting org.apache.hbase/hbase, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.hbase/hbase CVEs

Newest publication first

  1. CVE-2019-0212 Improper Authorization in org.apache.hbase:hbase

    Published
    HighCVSS 7.5 EPSS 3.8%

    In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not with the permissions...

  2. CVE-2015-1836 High severity vulnerability that affects org.apache.hbase:hbase

    Published
    HighCVSS 7.3 EPSS 7.4%

    Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service (da...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.