Maven org.apache.hadoop:hadoop-client

Name: Maven org.apache.hadoop:hadoop-client
Brand: Maven

productUS

pkg:maven/org.apache.hadoop/hadoop-client

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

1critical2high2medium0low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-3162US	high7.3	6.42% (94th)	—	2.7.0	2017-04-26	< 2.7.0
CVE-2017-3161US	medium6.1	3.87% (90th)	—	2.7.0	2017-04-26	< 2.7.0
CVE-2014-3627US	medium5.0	3.00% (87th)	—	1.0.1	2014-12-05	2 versions
CVE-2012-3376US	high7.5	2.63% (85th)	—	2.0.1-alpha	2012-07-12	2.0.0-alpha → 2.0.1-alpha
CVE-2012-4449US	critical9.8OT elevated	1.19% (68th)	—	2.0.2	2017-10-30	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation1 CVEs
CWE-310CWE-3101 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm1 CVEs
CWE-59Improper Link Resolution Before File Access ('Link Following')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.