DG
Product
Data Grid
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 8Medium 9Low 2
Watch
Add Data Grid to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-16102 | 8.1 | Aug 5 | Keycloak-services: keycloak-services: default dcr policy allows role forgery via user property mappers Affected: 8.0 |
| CVE-2026-15573 | 8.1 | Aug 5 | Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher Affected: 8.0 |
| CVE-2025-23368 | 8.1 | Mar 4 | Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli Affected: 8.0 |
| CVE-2026-44495 | 7.7 | Jun 11 | Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge Affected: 8.6.2 |
| CVE-2024-7885 | 7.5 | Aug 21 | Undertow: improper state management in proxy protocol parsing causes information leakage Affected: 8.0.0 |
| CVE-2020-25644 | 7.5 | Oct 6 | A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session Affected: 8.0 |
| CVE-2023-4586 | 7.4 | Oct 4 | A vulnerability was found in the Hot Rod client Affected: 8.0.0 |
| CVE-2020-10771 | 7.1 | Jun 2 | A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests Affected: 8.0 |
Showing 8