Product by Apache Software Foundation
Apache Ignite
9 known vulnerabilities in Apache Ignite (Apache Software Foundation), 1 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
1
Actively exploited (KEV)
1
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-1273 | VMware Tanzu Spring Data Commons Property Binder Vulnerability In CISA KEVRansomwarealso in 5 other products | 9.8 | |
| Critical | CVE-2018-8018 | Apache Ignite: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2018-1295 | Apache Ignite: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2024-52577 | Apache Ignite: Possible RCE when deserializing incoming messages by the server node | 9.0 | |
| Critical | CVE-2020-1963 | Apache Ignite: security vulnerability | 9.1 | |
| High | CVE-2017-7686 | Apache Ignite: security vulnerability | 7.5 | |
| Medium | CVE-2016-6805 | Apache Ignite: XML External Entity (XXE) | 5.9 | |
| Low | CVE-2021-28163 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information to an Unauthorized Actor | 2.7 | |
| High | CVE-2025-48977 | Apache Ignite: REST HTTP arbitrary file read vulnerability | 6.5 |