JD
Product
Jboss Data Grid
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 9Medium 9Low 1
Watch
Add Jboss Data Grid to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5236 | 6.5 | Dec 18 | A flaw was found in Infinispan, which does not detect circular object references when unmarshalling Affected: All versions, or not specified |
| CVE-2023-3629 | 6.5 | Dec 18 | A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation Affected: All versions, or not specified |
| CVE-2023-3628 | 6.5 | Dec 18 | A flaw was found in Infinispan's REST Affected: All versions, or not specified |
| CVE-2020-25689 | 6.5 | Nov 2 | A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly… Affected: 7.0.0 |
| CVE-2019-14900 | 6.5 | Jul 6 | A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1 Affected: 7.0.0 |
| CVE-2017-2638 | 6.5 | Jul 16 | It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints Affected: 7.1 |
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: All versions, or not specified |
| CVE-2020-14340 | 5.9 | Jun 2 | A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles Affected: 6.0.0; 7.0.0 |
| CVE-2020-1710 | 5.3 | Sep 16 | The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400 Affected: 7.0.0 |
Showing 9