Infinispan

4 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2024-6875< 15.0.6Infinispan: infinispan: rest compare api has buffer leakMEDIUM 6.50.5 %
CVE-2020-10771Red Hat Data Grid 8.2.0A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. HIGH 7.10.4 %
CVE-2020-25711Infinispan 11.0.6 FinalA flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operatioMEDIUM 6.51.1 %
CVE-2020-10746Infinispan 11.0.0A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both RESMEDIUM 6.10.2 %