Apache Kafka Vulnerabilities

Apache Kafka vulnerabilities.

9 April 2025

Sensitive Configuration Exposure in Apache Pulsar's Integration with Apache Kafka
CVE-2025-30677
ApacheApache Pulsar Io Kafka...6.3MEDIUM

19 November 2024

Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients
CVE-2024-31141
ApacheApache Kafka Clients6.5MEDIUM

12 April 2024

Kafka Migration Bug Affects ACL Enforcement
CVE-2024-27309
ApacheApache Kafka7.4HIGH

7 February 2023

Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect
CVE-2023-25194
ApacheApache Kafka Connect Api👾🟡EPSS 94%8.8HIGH

20 September 2022

Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers
CVE-2022-34917
ApacheApache Kafka7.5HIGH

22 September 2021

Timing Attack Vulnerability for Apache Kafka Connect and Clients
CVE-2021-38153
ApacheApache Kafka5.9MEDIUM

14 January 2020

Weakness in Apache Kafka Connect May Expose Plaintext Secrets
CVE-2019-12399
ApacheKafka7.5HIGH

11 July 2019

Vulnerability in Apache Kafka Allows Bypass of ACL Validation
CVE-2018-17196
ApacheKafka8.8HIGH

26 July 2018

No more vulnerabilities to load.