CVE-2018-1288

mediumpriority · track · 24EPSS 0.048 · 92 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

4.80% (92nd) EPSS

CVSS 5.5 · medium

Is it mine?

20 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · nvd · osv

EPSS · scored 2026-10-27

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.

cvss

Technical severity, 0–10. One row per scoring source.

5.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.05.5mediumAV:N/AC:L/Au:S/C:N/I:P/A:Pprimary · NVD / NIST USexploitability 8 · impact 4.9

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:Lprimary · NVD / NIST USexploitability 2.8 · impact 2.5

v3.15.4mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:Lsecondary · OSV

v3.15mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-94US

affected products (20)

Products and version ranges known to be affected.

Apache Software Foundation Apache Kafka≤ 0.11.0.0 to 0.11.0.2enisa_euvdEU
Apache Software Foundation Apache Kafka≤ 1.0.0enisa_euvdEU
Apache Software Foundation Apache Kafka≤ 0.9.0.0 to 0.9.0.1enisa_euvdEU
Apache Software Foundation Apache Kafka≤ 0.10.0.0 to 0.10.2.1enisa_euvdEU
apache kafka≤ 0.9.0.1nvdUScpe:2.3:a:apache:kafka:*:*:*:*:*:*:*:*
apache kafka0.10.0.0 → 0.10.2.1nvdUScpe:2.3:a:apache:kafka:*:*:*:*:*:*:*:*
apache kafka0.11.0.0 → 0.11.0.2nvdUScpe:2.3:a:apache:kafka:*:*:*:*:*:*:*:*
apache kafka0.9.0.0 → 0.9.0.1nvdUScpe:2.3:a:apache:kafka:*:*:*:*:*:*:*:*
apache kafka= 1.0.0nvdUScpe:2.3:a:apache:kafka:*:*:*:*:*:*:*:*
oracle database= 11.2.0.4nvdUScpe:2.3:a:oracle:database:*:*:*:*:*:*:*:*
oracle database= 12.1.0.2nvdUScpe:2.3:a:oracle:database:*:*:*:*:*:*:*:*
oracle database= 12.2.0.1nvdUScpe:2.3:a:oracle:database:*:*:*:*:*:*:*:*
oracle database= 18cnvdUScpe:2.3:a:oracle:database:*:*:*:*:*:*:*:*
oracle database= 19cnvdUScpe:2.3:a:oracle:database:*:*:*:*:*:*:*:*
oracle primavera p6 enterprise project portfolio management19.12.0.0 → 19.12.6.0nvdUScpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*
oracle timesten in-memory database< 18.1.2.1.0nvdUScpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*
redhat jboss middleware text-only advisories= 1.0nvdUScpe:2.3:a:redhat:jboss_middleware_text-only_advisories:*:*:*:*:*:*:*:*
Maven org.apache.kafka:kafka0.11.0.0 → 0.11.0.3osvUSpkg:maven/org.apache.kafka/kafka
Maven org.apache.kafka:kafka0.9.0.0 → 0.10.2.2osvUSpkg:maven/org.apache.kafka/kafka
Maven org.apache.kafka:kafka1.0.0 → 1.0.1osvUSpkg:maven/org.apache.kafka/kafka

advisories (1)

Vendor and ecosystem advisories describing this.

GHSA-gh27-38p5-mrxcImproper Control of Generation of Code in Apache Kafka2022-05-13ghsa · osvUS
In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd osv NVD CVE.org MITRE

published 2018-07-26modified 2026-06-17

references (33)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan