apache hbase

Name: apache hbase
Brand: apache

productUS

cpe:2.3:a:apache:hbase:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high1medium0low

updated 2026-10-28

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-1836US	high7.3	7.42% (94th)	—	no fix	2015-12-21	15 versions
CVE-2019-0212US	high7.5	3.78% (90th)	—	no fix	2019-03-28	2 versions
CVE-2019-15544US	high7.5	3.76% (90th)	—	no fix	2019-08-26	= 2.2.3
CVE-2018-8025US	high8.1	1.74% (78th)	—	no fix	2018-06-27	3 versions
CVE-2013-2193US	medium4.3	0.70% (53rd)	—	no fix	2014-05-29	13 versions
CVE-2026-49326US	—OT elevated	0.49% (42nd)	—	2.6.6	2026-07-24	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.