IN
Vendor
Infinispan
16
CVEs
0
On KEV
0
New 30D
Products
IN9.8
Infinispan
Infinispan
12 CVEs0 on KEV0 new
IN9.8
Infinispan-server-rest
Infinispan
2 CVEs0 on KEV0 new
HR7.4
Hot Rod
Infinispan
1 CVEs0 on KEV0 new
IN6.1
Infinispan-server-runtime
Infinispan
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-5731 | IN Infinispan Infinispan | 5.5 | Jun 26 | A flaw was found in Infinispan CLI |
| CVE-2023-5384 | IN Infinispan Infinispan | 2.7 | Dec 18 | A flaw was found in Infinispan |
| CVE-2023-5236 | IN Infinispan Infinispan | 6.5 | Dec 18 | A flaw was found in Infinispan, which does not detect circular object references when unmarshalling |
| CVE-2023-3629 | IN Infinispan Infinispan | 6.5 | Dec 18 | A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation |
| CVE-2023-3628 | IN Infinispan Infinispan | 6.5 | Dec 18 | A flaw was found in Infinispan's REST |
| CVE-2023-4586 | HR Hot Rod Infinispan | 7.4 | Oct 4 | A vulnerability was found in the Hot Rod client |
| CVE-2021-31917 | IN Infinispan-server-rest Infinispan | 9.8 | Sep 21 | A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0) |
| CVE-2020-10771 | IN Infinispan-server-rest Infinispan | 7.1 | Jun 2 | A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests |
| CVE-2020-25711 | IN Infinispan Infinispan | 6.5 | Dec 3 | A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations |
| CVE-2020-10746 | IN Infinispan-server-runtime Infinispan | 6.1 | Oct 19 | A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs |
| CVE-2019-10158 | IN Infinispan Infinispan | 9.8 | Jan 2 | A flaw was found in Infinispan through version 9.4.14.Final |
| CVE-2019-10174 | IN Infinispan Infinispan | 8.8 | Nov 25 | A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any… |
| CVE-2016-0750 | IN Infinispan Infinispan | 8.8 | Sep 11 | The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events |
| CVE-2017-2638 | IN Infinispan Infinispan | 6.5 | Jul 16 | It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints |
| CVE-2018-1131 | IN Infinispan Infinispan | 8.8 | May 15 | Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations |
| CVE-2017-15089 | IN Infinispan Infinispan | 8.8 | Feb 15 | It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache |