Infinispan

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Infinispan records in CISA KEV

No Infinispan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Infinispan 12 records MEDIUM Infinispan-server-rest 2 records MEDIUM Hot Rod 1 record LOW Infinispan-server-runtime 1 record LOW

Records

1 record in Infinispan-server-runtime · all components

TI-2020-08644 CVE-2020-10746 · GHSA-3g48-cr7g-6ph4

Missing authorization in Infinispan

LOW 27

A flaw was found in Infinispan (org.infinispan:infinispan-server-runtime) version 10, where it permits local access to controls via both REST and HotRod APIs.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00236 Published 2020-10-19 Partial fix CWE-862

Open these records in search →

Critical	2
High	7
Medium	7
Low	0
No CVSS	0