Filter
Software
maven/org.infinispan:infinispan-cachestore-jdbcInfinispan: credentials returned from configuration as clear text
7.2
First published (updated )
Redhat Data GridInfinispan: circular reference on marshalling leads to dos
6.5
First published (updated )
Netty NettyHotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attack
7.4
First published (updated )
maven/org.infinispan:infinispan-server-restInfinispan: non-admins should not be able to get cache config via rest api
6.5
First published (updated )
maven/org.infinispan:infinispan-server-restInfispan: rest bulk ops don't check permissions
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Redhat Data GridA flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 thro…
9.8
First published (updated )
redhat/InfinispanA flaw was found in infinispan 10 REST API, where authorization permissions are not checked while pe…
6.5
First published (updated )
redhat/InfinispanInfinispan permits local access to controls via both REST and HotRod APIs. A user authed to the loca…
6.1
First published (updated )
Infinispan InfinispanA flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the sessi…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/eap7-glassfish-jsfA vulnerability was found in Infinispan before version 10.0.0 Final. The invokeAccessibly method fro…
8.8
First published (updated )
Infinispan InfinispanInfinispan permits improper deserialization of trusted data via XML and JSON transcoders under certa…
8.8
First published (updated )
Infinispan InfinispanA vulnerability in Infinispan was found allowing malicious users to inject malicious serialized obje…
8.8
First published (updated )
maven/org.infinispan:infinispan-server-coreIt was found that the REST API in Infinispan before version 9.0.0 did not properly enforce auth cons…
6.5
First published (updated )
Infinispan InfinispanThe hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message…
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.