İçeriğe atla
Noroxi

Infinispan kayıtları

infinispan üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%75
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 23
  6. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

16 kayıt
  • CVE-2019-10158
    40Planlayın

    A flaw was found in Infinispan through version 9.4.14.Final.

    KritikCVSS 9,8İstismar yokEPSS %1

    infinispan · infinispan2 Oca 2020

  • CVE-2021-31917
    39İzleyin

    A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0).

    KritikCVSS 9,8İstismar yokEPSS %1

    infinispan · infinispan-server-rest21 Eyl 2021

  • CVE-2019-10174
    36İzleyin

    A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application cl

    YüksekCVSS 8,8İstismar yokEPSS %3

    infinispan · infinispan25 Kas 2019

  • CVE-2017-15089
    36İzleyin

    It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache.

    YüksekCVSS 8,8İstismar yokEPSS %2

    infinispan · infinispan15 Şub 2018

  • CVE-2016-0750
    36İzleyin

    The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events.

    YüksekCVSS 8,8İstismar yokEPSS %2

    infinispan · infinispan11 Eyl 2018

  • CVE-2018-1131
    35İzleyin

    Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations.

    YüksekCVSS 8,8İstismar yokEPSS %1

    infinispan · infinispan15 May 2018

  • CVE-2023-4586
    29İzleyin

    Hotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attack

    YüksekCVSS 7,4İstismar yokEPSS %0

    redhat · data grid4 Eki 2023

  • CVE-2020-10771
    28İzleyin

    A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests.

    YüksekCVSS 7,1İstismar yokEPSS %0

    infinispan · infinispan-server-rest2 Haz 2021

  • CVE-2017-2638
    26İzleyin

    It was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth constraints.

    OrtaCVSS 6,5İstismar yokEPSS %1

    infinispan · infinispan16 Tem 2018

  • CVE-2023-5236
    26İzleyin

    Infinispan: circular reference on marshalling leads to dos

    OrtaCVSS 6,5İstismar yokEPSS %1

    infinispan · infinispan18 Ara 2023

  • CVE-2020-25711
    26İzleyin

    A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operatio

    OrtaCVSS 6,5İstismar yokEPSS %1

    infinispan · infinispan3 Ara 2020

  • CVE-2023-3628
    26İzleyin

    Infispan: rest bulk ops don't check permissions

    OrtaCVSS 6,5İstismar yokEPSS %0

    infinispan · infinispan18 Ara 2023

  • CVE-2023-3629
    26İzleyin

    Infinispan: non-admins should not be able to get cache config via rest api

    OrtaCVSS 6,5İstismar yokEPSS %0

    infinispan · infinispan18 Ara 2023

  • CVE-2020-10746
    24İzleyin

    A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both RES

    OrtaCVSS 6,1İstismar yokEPSS %0

    infinispan · infinispan-server-runtime19 Eki 2020

  • CVE-2025-5731
    22İzleyin

    Infinispan: credential leakage in infinispan cli

    OrtaCVSS 5,5İstismar yokEPSS %0

    infinispan · infinispan26 Haz 2025

  • CVE-2023-5384
    10İzleyin

    Infinispan: credentials returned from configuration as clear text

    DüşükCVSS 2,7İstismar yokEPSS %0

    infinispan · infinispan18 Ara 2023