Infinispan vulnerabilities

Products

• Infinispan 12
• Infinispan-server-rest 2

Newest

• infinispan, red hat data grid 8.5.4, jboss enterprise application platform 7 +4 more +6 more Infinispan: credential leakage in infinispan cli CVE-2025-5731 5.5 MediumJune 26, 2025
• infinispan, red hat data grid 8.4.6, redhat data grid +1 more +3 more Infinispan: credentials returned from configuration as clear text CVE-2023-5384 Fix available 7.2 HighDecember 18, 2023
• infinispan, red hat build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +13 more +15 more Infinispan: circular reference on marshalling leads to dos CVE-2023-5236 Fix available 4.4 MediumDecember 18, 2023
• infinispan, red hat data grid 8.4.4, jboss enterprise application platform 6 +3 more +5 more Infinispan: non-admins should not be able to get cache config via rest api CVE-2023-3629 Fix available 4.3 MediumDecember 18, 2023
• infinispan, red hat data grid 8.4.4, jboss enterprise application platform 6 +3 more +5 more Infispan: rest bulk ops don't check permissions CVE-2023-3628 Fix available 6.5 MediumDecember 18, 2023
• infinispan hot rod, red hat data grid 8.4.6, redhat data grid +2 more Hotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attack CVE-2023-4586 7.4 HighOctober 4, 2023
• infinispan infinispan-server-rest, redhat data grid +1 more A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0... CVE-2021-31917 9.8 CriticalSeptember 21, 2021
• red hat infinispan, infinispan infinispan-server-rest, netapp oncommand insight +1 more +3 more A flaw was found in Infinispan version 10, where it is possible to perform various actions that... CVE-2020-10771 7.1 HighJune 2, 2021
• infinispan, netapp active iq unified manager, redhat data grid +2 more Improper Access Control in infinispan-server-runtime CVE-2020-25711 Fix available 6.5 MediumDecember 3, 2020
• infinispan infinispan-server-runtime, red hat infinispan +1 more A flaw was found in Infinispan version 10, where it permits local access to controls via both... CVE-2020-10746 6.1 MediumOctober 19, 2020
• infinispan, redhat jboss data grid +1 more Improper implementation of the session fixation protection in Infinispan CVE-2019-10158 Fix available 5.4 MediumJanuary 2, 2020
• [unknown] infinispan, netapp active iq unified manager, redhat fuse +4 more +6 more Use of Externally-Controlled Input to Select Classes or Code in Infinispan CVE-2019-10174 Fix available 7.5 HighNovember 25, 2019
• infinispan Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization CVE-2016-0750 Fix available 4.2 MediumSeptember 11, 2018
• [unknown] infinispan, redhat jboss data grid +1 more Infinispan Rest API Does Not Enforce Auth Constraints CVE-2017-2638 Fix available 6.5 MediumJuly 16, 2018
• infinispan, redhat jboss data grid +1 more Deserialization of Untrusted Data in Infinispan CVE-2018-1131 Fix available 8.8 HighMay 15, 2018
• infinispan Deserialization of Untrusted Data in Infinispan CVE-2017-15089 Fix available 8.8 HighFebruary 15, 2018