n/a Apache Hadoop

Name: n/a Apache Hadoop
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical7high0medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-11768US	high7.5	6.61% (94th)	—	no fix	2019-10-04	≤ Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, 2.0.0-alpha to 2.8.4
CVE-2018-11765US	high7.5	5.21% (92nd)	—	no fix	2020-09-30	≤ Apache Hadoop 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5
CVE-2020-9492US	high8.8OT elevated	4.49% (91st)	—	no fix	2021-01-26	≤ Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, 2.0.0-alpha to 2.10.0
CVE-2018-8029US	high8.8	3.91% (90th)	—	no fix	2019-05-30	≤ Apache Hadoop 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, 2.2.0 to 2.8.4
CVE-2018-11767US	high7.4	3.73% (90th)	—	no fix	2019-03-21	≤ Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6
CVE-2016-5393US	high8.8	3.14% (88th)	—	no fix	2016-11-29	≤ Apache Hadoop 2.6.x before 2.6.5, 2.7.x before 2.7.3
CVE-2018-11764US	high8.8OT elevated	2.39% (84th)	—	no fix	2020-10-21	≤ Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, 3.0.0

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-264CWE-2641 CVEs
CWE-284Improper Access Control1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-863Incorrect Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.