Read the docs

hazelcast

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

hazelcast records in CISA KEV

No hazelcast vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hazelcast 8 records MEDIUM Hazelcast-jet 1 record MEDIUM Imdg 1 record MEDIUM Jet 1 record MEDIUM Management Center 1 record MEDIUM

Records

1 record in Management Center · all components

TI-2024-37405 CVE-2024-56518 · GHSA-v8vm-8h6v-g2gc

Hazelcast Management Center through 6.0 allows remote code execution via a…

Priority MEDIUM 51

Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document (aka a client configuration file), which can be uploaded at the /cluster-con…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01023 Published 2025-04-17 No fix listed CWE-94
Open these records in search →