Vendor
Red Hat
16 known vulnerabilities in products by Red Hat, 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2017-15089 | Infinispan: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2019-10174 | Infinispan: Unsafe Reflection | 7.5 | |
| Critical | CVE-2021-31917 | Red Hat DataGrid and Infinispan: Improper Authentication | 9.8 | |
| High | CVE-2018-1131 | Red Hat Infinispan: Acceptance of Extraneous Untrusted Data With Trusted Data | 8.8 | |
| Critical | CVE-2019-10158 | Infinispan: Session Fixation | 5.4 | |
| Medium | CVE-2017-2638 | Infinispan: Missing Authentication for Critical Function | 6.5 | |
| High | CVE-2016-0750 | Red Hat Infinispan: Improper Neutralization of Special Elements | 4.2 | |
| Medium | CVE-2020-25711 | Infinispan: Missing Authorization | 6.5 | |
| Medium | CVE-2023-3628 | Infispan: rest bulk ops don't check permissions | 6.5 | |
| Medium | CVE-2023-5236 | Infinispan: circular reference on marshalling leads to dos | 4.4 | |
| High | CVE-2023-4586 | Red Hat Data Grid 8.4.6: Improper Input Validation | 7.4 | |
| High | CVE-2023-5384 | Infinispan: credentials returned from configuration as clear text | 7.2 | |
| Medium | CVE-2023-3629 | Infinispan: non-admins should not be able to get cache config via rest api | 4.3 | |
| High | CVE-2020-10771 | Infinispan: Cross-Site Request Forgery (CSRF) | 7.1 | |
| Medium | CVE-2025-5731 | Infinispan: credential leakage in infinispan cli | 5.5 | |
| Medium | CVE-2020-10746 | Infinispan: Missing Authorization | 6.1 |
Products
| Red Hat Infinispan | 12 | 0 |