Apache Ignite vulnerabilities

• apache ignite Apache Ignite: REST HTTP arbitrary file read vulnerability CVE-2025-48977 Fix available 8.5 HighMay 28, 2026
• apache ignite Apache Ignite: Possible RCE when deserializing incoming messages by the server node CVE-2024-52577 Fix available 9.5 CriticalFebruary 14, 2025
• eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 more Directory exposure in jetty CVE-2021-28163 Fix available 2.7 LowApril 1, 2021
• apache ignite File system access via H2 in Apache Ignite CVE-2020-1963 Fix available 9.1 CriticalJune 3, 2020
• apache ignite Code execution via deserialization in org.apache.ignite:ignite-core CVE-2018-8018 Fix available 9.8 CriticalJuly 19, 2018
• broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 more Spring Data Commons remote code injection vulnerability CVE-2018-1273 In KEVPublic exploitFix available EPSS 97.0% 9.8 CriticalApril 11, 2018
• apache ignite Apache serialization mechanism does not have a list of classes allowed for serialization/deserialization CVE-2018-1295 Fix available 9.8 CriticalApril 2, 2018
• apache ignite Apache Ignite communicates to an external PHP server where sensitive information is sent CVE-2017-7686 Fix available 7.5 HighJune 28, 2017
• apache ignite Moderate severity vulnerability that affects org.apache.ignite:ignite-core CVE-2016-6805 Fix available 5.9 MediumApril 7, 2017