CveMateVulnerability intelligence

Datastax vulnerabilities

2 vulnerabilities

Known vulnerabilities in Datastax products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

Products

2

Enterprise Service Broker1 vulnerabilities
Pulsar Jms1 vulnerabilities

CVE-2026-111868datastaxpulsar-jms3d ago18-10-2026 00:15

A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/messages/PulsarObjectMessage.java. This manipulation causes deserialization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.CVE-2019-3800anynineselasticsearch+567y ago05-08-2019 16:38

CF CLI version prior to v6.45.0 (bosh release version 1.16.0) writes the client id and secret to its config file when the user authenticates with --client-credentials flag. A local authenticated malicious user with access to the CF CLI config file can act as that client, who is the owner of the leaked credentials.