DG
Product
Data Grid
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 8Medium 9Low 2
Watch
Add Data Grid to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-31917 | 9.8 | Sep 21 | A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0) Affected: 8.0.0; 8.0.1; 8.1.0; 8.1.1 |
| CVE-2015-7501 | 9.8 | Nov 9 | Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x;… Affected: 6.0.0 |
| CVE-2025-12543 | 9.6 | Jan 7 | Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf Affected: 8.0 |
| CVE-2026-28369 | 9.1 | Mar 27 | Undertow: undertow: request smuggling via malformed http request headers Affected: 8.0 |
| CVE-2026-28367 | 9.1 | Mar 27 | Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator Affected: 8.0 |
| CVE-2026-28368 | 9.1 | Mar 27 | Undertow: undertow: request smuggling via inconsistent header parsing Affected: 8.0 |
| CVE-2026-16102 | 8.1 | Aug 5 | Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers Affected: 8.0 |
| CVE-2026-15573 | 8.1 | Aug 5 | Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher Affected: 8.0 |
| CVE-2025-23368 | 8.1 | Mar 4 | Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli Affected: 8.0 |
| CVE-2026-44495 | 7.7 | Jun 11 | Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge Affected: 8.6.2 |
| CVE-2024-7885 | 7.5 | Aug 21 | Undertow: improper state management in proxy protocol parsing causes information leakage Affected: 8.0.0 |
| CVE-2020-25644 | 7.5 | Oct 6 | A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session Affected: 8.0 |
| CVE-2023-4586 | 7.4 | Oct 4 | A vulnerability was found in the Hot Rod client Affected: 8.0.0 |
| CVE-2020-10771 | 7.1 | Jun 2 | A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests Affected: 8.0 |
| CVE-2023-5236 | 6.5 | Dec 18 | A flaw was found in Infinispan, which does not detect circular object references when unmarshalling Affected: before 8.4.4 |
| CVE-2023-3629 | 6.5 | Dec 18 | A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation Affected: before 8.4.4 |
| CVE-2023-3628 | 6.5 | Dec 18 | A flaw was found in Infinispan's REST Affected: before 8.4.4 |
| CVE-2020-25711 | 6.5 | Dec 3 | A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations Affected: 8.0 |
| CVE-2025-5731 | 5.5 | Jun 26 | A flaw was found in Infinispan CLI Affected: 8.5.4 |
| CVE-2026-16093 | 5.4 | Jul 17 | Keycloak-services: keycloak-services: required signed-jwt assertion policy can be bypassed with unsigned assertion headers Affected: 8.0 |
| CVE-2021-3642 | 5.3 | Aug 5 | A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if… Affected: 8.0 |
| CVE-2019-14838 | 4.9 | Oct 14 | A flaw was found in wildfly-core before 7.2.5.GA Affected: 7.3.4 |
| CVE-2021-3536 | 4.8 | May 20 | A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field,… Affected: 8.0 |
| CVE-2026-15945 | 2.7 | Jul 16 | Keycloak-services: keycloak-services: group hierarchy search discloses hidden parent groups under fgap v2 Affected: 8.0 |
| CVE-2023-5384 | 2.7 | Dec 18 | A flaw was found in Infinispan Affected: before 8.4.6 |
Showing 25