Hbase (Apache) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 183 known versions, newest CVE from 2026-07-24. Vendor: Apache.

CVEs of Hbase

• CVE-2026-49326 - CVSS 6.5 (medium), 2026-07-24: Missing Authorization vulnerability in Apache HBase thrift and rest delegation service. A scan operation in thrift/rest service has 3 steps, open,…
• CVE-2019-15544 - CVSS 7.5 (high), 2019-08-26: An issue was discovered in the protobuf crate before 2.6.0 for Rust. Attackers can exhaust all memory via Vec::reserve calls.
• CVE-2019-0212 - CVSS 7.5 (high), 2019-03-28: In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server.…
• CVE-2018-8025 - CVSS 8.1 (high), 2018-06-27: CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could…
• CVE-2015-1836 - CVSS 7.3 (high), 2015-12-21: Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other…
• CVE-2013-2193 - CVSS 4.3 (medium), 2014-05-29: Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable…