Product by Red Hat
Red Hat Data Grid
25 known vulnerabilities in Red Hat Data Grid (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2015-7501 | Red Hat Data Grid: security vulnerability | 9.8 | |
| High | CVE-2024-7885 | Undertow: improper state management in proxy protocol parsing causes information leakage | 7.5 | |
| Critical | CVE-2025-12543 | Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11: Improper Input Validation | 9.6 | |
| High | CVE-2020-25644 | Wildfly-openssl: Missing Release of Memory after Effective Lifetime | 7.5 | |
| Critical | CVE-2021-31917 | Red Hat DataGrid and Infinispan: Improper Authentication | 9.8 | |
| Critical | CVE-2026-28368 | Undertow: undertow: request smuggling via inconsistent header parsing | 9.1 | |
| Critical | CVE-2026-28367 | Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator | 9.1 | |
| Critical | CVE-2026-28369 | Undertow: undertow: request smuggling via malformed http request headers | 9.1 | |
| High | CVE-2026-44495 | Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge | 7.0 | |
| High | CVE-2025-23368 | Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli | 8.1 | |
| High | CVE-2026-16102 | Red Hat: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 8.1 | |
| High | CVE-2026-15573 | Red Hat: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 8.1 | |
| Medium | CVE-2020-25711 | Infinispan: Missing Authorization | 6.5 | |
| Medium | CVE-2023-3628 | Infispan: rest bulk ops don't check permissions | 6.5 | |
| Medium | CVE-2019-14838 | Red Hat Wildfly-core: Improper Access Control | 5.2 | |
| Medium | CVE-2023-5236 | Infinispan: circular reference on marshalling leads to dos | 4.4 | |
| High | CVE-2023-4586 | Red Hat Data Grid 8.4.6: Improper Input Validation | 7.4 | |
| Medium | CVE-2026-16093 | Red Hat: Reliance on Untrusted Inputs in a Security Decision | 5.4 | |
| High | CVE-2023-5384 | Infinispan: credentials returned from configuration as clear text | 7.2 | |
| Medium | CVE-2026-15945 | Red Hat: Authorization Bypass Through User-Controlled Key | 4.3 | |
| Medium | CVE-2021-3642 | Wildfly-elytron: Observable Discrepancy | 5.3 | |
| Medium | CVE-2023-3629 | Infinispan: non-admins should not be able to get cache config via rest api | 4.3 | |
| High | CVE-2020-10771 | Infinispan: Cross-Site Request Forgery (CSRF) | 7.1 | |
| Medium | CVE-2021-3536 | Wildfly: Cross-site Scripting | 4.8 | |
| Medium | CVE-2025-5731 | Infinispan: credential leakage in infinispan cli | 5.5 |