IG
Product
Ignite
On CISA KEVExploited in the wildRansomware-linked
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 1Medium 2Low 1
Watch
Add Ignite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1273 RansomwareIn wildKEV | 9.8 | Apr 11 | Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of… Affected: 1.0.1 through 2.5.0; 1.0.0; 1.0.0 |
| CVE-2018-8018 | 9.8 | Jul 20 | In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it… Affected: before 2.4.8; after 2.5.0 before 2.5.3 |
| CVE-2018-1295 | 9.8 | Apr 2 | In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary… Affected: through 2.3.0 |
| CVE-2020-1963 | 9.1 | Jun 3 | Apache Ignite uses H2 database to build SQL distributed execution engine Affected: through 2.8.0 |
| CVE-2024-52577 | 9.0 | Feb 14 | In Apache Ignite versions from 2.6.0 and before 2.17.0, configured Class Serialization Filters are ignored for some Ignite endpoints Affected: 2.6.0 before 2.17.0 |
Showing 5