Maven org.apache.hadoop:hadoop-common

Name: Maven org.apache.hadoop:hadoop-common
Brand: Maven

productUS

pkg:maven/org.apache.hadoop/hadoop-common

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

3critical4high3medium1low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-25168US	critical9.8	4.59% (92nd)	—	3.3.3	2022-08-04	3 versions
CVE-2020-9492US	high8.8OT elevated	4.49% (91st)	—	2.10.1	2021-01-26	3 versions
CVE-2022-26612US	critical9.8	4.24% (91st)	—	3.3.3	2022-04-07	3 versions
CVE-2016-5393US	high8.8	3.14% (88th)	—	2.7.3	2016-11-29	2 versions
CVE-2021-37404US	critical9.8	2.99% (87th)	—	3.2.3	2022-06-13	3 versions
CVE-2016-6811US	high8.8	2.62% (85th)	—	2.7.4	2017-04-11	2.0.0-alpha → 2.7.4
CVE-2017-7669US	high7.5	1.80% (78th)	—	2.8.1	2017-06-05	2 versions
CVE-2014-0229US	medium6.5	1.60% (76th)	—	0.23.11	2017-03-23	2 versions
CVE-2013-2192US	low3.2	1.07% (65th)	—	0.23.9	2014-01-24	2 versions
CVE-2016-5001US	medium5.5	0.70% (53rd)	—	2.6.4	2017-08-30	2 versions
CVE-2024-23454US	—	0.41% (35th)	—	3.4.0	2024-09-25	< 3.4.0
CVE-2015-1776US	medium6.2	0.32% (25th)	—	2.6.5	2016-04-19	2.6.0 → 2.6.5

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-264CWE-2642 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-131Incorrect Calculation of Buffer Size1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.