Login Request a demo
IN
Product
Infinispan
by Infinispan · last CVE Jun 26, 2025
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 4Medium 6Low 1
Severity
All severities12Critical1High4Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Infinispan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-10158
9.8
2%
Jan 2
A flaw was found in Infinispan through version 9.4.14.Final
Affected: through 9.4.14
CVE-2019-10174
8.8
3%
Nov 25
A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any…
Affected: before 8.2.12; 9.0.0 before 9.4.17
CVE-2016-0750
8.8
2%
Sep 11
The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events
Affected: before 9.1.0
CVE-2018-1131
8.8
1%
May 15
Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations
Affected: 8.2.10; 9.0.3; 9.1.7; 9.2.2; 9.3.0
CVE-2017-15089
8.8
3%
Feb 15
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache
Affected: through 9.1.6; 9.2.0; 9.2.0; 9.2.0; 9.2.0; 9.2.0
CVE-2023-5236
6.5
1%
Dec 18
A flaw was found in Infinispan, which does not detect circular object references when unmarshalling
Affected: All versions, or not specified
CVE-2023-3629
6.5
1%
Dec 18
A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation
Affected: All versions, or not specified
CVE-2023-3628
6.5
1%
Dec 18
A flaw was found in Infinispan's REST
Affected: All versions, or not specified
CVE-2020-25711
6.5
1%
Dec 3
A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations
Affected: before 11.0.6
CVE-2017-2638
6.5
2%
Jul 16
It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints
Affected: before 9.0.0
CVE-2025-5731
5.5
0%
Jun 26
A flaw was found in Infinispan CLI
Affected: All versions, or not specified
CVE-2023-5384
2.7
1%
Dec 18
A flaw was found in Infinispan
Affected: All versions, or not specified
Showing 12