HA
Vendor
hazelcast
15
CVEs
0
On KEV
2
New 30D
Products
HA9.8
hazelcast
hazelcast
10 CVEs0 on KEV2 new
HA9.8
hazelcast/hazelcast
hazelcast
1 CVEs0 on KEV0 new
HA9.1
Hazelcast-jet
Hazelcast
1 CVEs0 on KEV0 new
IM8.8
Imdg
Hazelcast
1 CVEs0 on KEV0 new
JE9.8
Jet
Hazelcast
1 CVEs0 on KEV0 new
MC9.8
Management Center
Hazelcast
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107726 | HA hazelcast hazelcast | 9.3 | Oct 8 | Hazelcast: Arbitrary member memory access by low-privileged client |
| CVE-2026-107725 | HA hazelcast hazelcast | 8.7 | Oct 8 | Hazelcast: Authorization bypass in IMap Predicates API |
| CVE-2024-56518 | MC Management Center Hazelcast | 9.8 | Apr 17 | Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document (aka a client configuration file),… |
| CVE-2023-45859 | HA Hazelcast Hazelcast | 7.6 | Feb 28 | In Hazelcast through 4.1.10, 4.2 through 4.2.8, 5.0 through 5.0.5, 5.1 through 5.1.7, 5.2 through 5.2.4, and 5.3 through 5.3.2, some client operations don't check permissions… |
| CVE-2023-45860 | HA Hazelcast Hazelcast | 6.5 | Feb 16 | In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector |
| CVE-2023-33265 | IM Imdg Hazelcast | 8.8 | Jul 18 | In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, executor services don't check client permissions properly, allowing authenticated users to execute tasks on… |
| CVE-2023-33264 | HA Hazelcast Hazelcast | 4.3 | May 22 | In Hazelcast through 5.0.4, 5.1 through 5.1.6, and 5.2 through 5.2.3, configuration routines don't mask passwords in the member configuration properly |
| CVE-2022-36437 | HA Hazelcast-jet Hazelcast | 9.1 | Dec 29 | The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster with the identity of another already… |
| CVE-2022-0265 | HA hazelcast/hazelcast hazelcast | 9.8 | Mar 3 | Improper Restriction of XML External Entity Reference in hazelcast/hazelcast |
| CVE-2020-26168 | HA Hazelcast Hazelcast | 9.8 | Nov 9 | The LDAP authentication method in LdapLoginModule in Hazelcast IMDG Enterprise 4.x before 4.0.3, and Jet Enterprise 4.x through 4.2, doesn't verify properly the password in some… |
| CVE-2016-10750 | HA Hazelcast Hazelcast | 8.1 | May 22 | In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization |