Read the docs

hazelcast

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

hazelcast records in CISA KEV

No hazelcast vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hazelcast 8 records MEDIUM Hazelcast-jet 1 record MEDIUM Imdg 1 record MEDIUM Jet 1 record MEDIUM Management Center 1 record MEDIUM

Records

1 record in Hazelcast-jet · all components

TI-2022-16762 CVE-2022-36437 · GHSA-c5hg-mr8r-f6jp

The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated…

Priority MEDIUM 49

The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster with the identity of another already authenticated connection.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01088 Published 2022-12-29 Partial fix · 3.12.13, 4.1.10 +4 CWE-384
Open these records in search →