Read the docs

Infinispan

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Infinispan records in CISA KEV

No Infinispan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Infinispan 12 records MEDIUM Infinispan-server-rest 2 records MEDIUM Hot Rod 1 record LOW Infinispan-server-runtime 1 record LOW

Records

2 records in Infinispan-server-rest · all components

TI-2021-11905 CVE-2021-31917 · GHSA-gwqg-r7f7-jjw4

Improper authentication in Red Hat DataGrid and Infinispan

Priority MEDIUM 45

A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01347 Published 2021-09-21 Fixed CWE-287
TI-2020-08666 CVE-2020-10771 · GHSA-84m7-cxq5-q9xc

Cross-site request forgery in Infinispan

Priority LOW 32

A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00445 Published 2021-06-02 Fixed CWE-352
Open these records in search →