Product by Red Hat

Red Hat JBoss Data Grid

25 known vulnerabilities in Red Hat JBoss Data Grid (Red Hat), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Red Hat JBoss Data Grid (Red Hat)

Critical	CVE-2023-44487	HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 158 other products	7.5	10.10.2023
High	CVE-2021-4104	Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 also in 45 other products	7.5	14.12.2021
High	CVE-2022-1271	GNU Gzip: Incorrect Behavior Order: Early Validation also in 5 other products	8.8	31.08.2022
High	CVE-2016-4970	Netty: Infinite Loop also in 3 other products	7.5	13.04.2017
Critical	CVE-2019-14892	Red Hat Jackson-databind: Deserialization of Untrusted Data also in 8 other products	7.5	02.03.2020
High	CVE-2019-10174	Infinispan: Unsafe Reflection also in 6 other products	7.5	25.11.2019
High	CVE-2020-25644	Wildfly-openssl: Missing Release of Memory after Effective Lifetime also in 8 other products	7.5	06.10.2020
High	CVE-2019-14888	Red Hat Undertow: Uncontrolled Resource Consumption also in 6 other products	7.5	23.01.2020
High	CVE-2019-10184	Undertow: Missing Authorization also in 5 other products	5.3	25.07.2019
Critical	CVE-2019-3888	Red Hat Undertow: Insertion of Sensitive Information into Log File also in 6 other products	5.3	12.06.2019
High	CVE-2020-1757	Red Hat Undertow: Improper Input Validation also in 6 other products	8.1	21.04.2020
Medium	CVE-2019-10219	Hibernate Hibernate-validator: Cross-site Scripting also in 166 other products	6.5	08.11.2019
Medium	CVE-2019-14900	Hibernate: SQL Injection also in 9 other products	6.5	06.07.2020
Medium	CVE-2020-14340	XNIO: Uncontrolled Resource Consumption also in 11 other products	5.9	02.06.2021
High	CVE-2018-1131	Red Hat Infinispan: Acceptance of Extraneous Untrusted Data With Trusted Data also in 2 other products	8.8	15.05.2018
Critical	CVE-2019-10158	Infinispan: Session Fixation also in 1 other product	5.4	02.01.2020
Medium	CVE-2017-2638	Infinispan: Missing Authentication for Critical Function also in 1 other product	6.5	16.07.2018
Critical	CVE-2019-10212	Redhat Undertow: Insertion of Sensitive Information into Log File also in 6 other products	4.8	02.10.2019
Critical	CVE-2019-14887	Red Hat Wildfly: Algorithm Downgrade also in 6 other products	7.4	16.03.2020
Medium	CVE-2020-25689	Red Hat Wildfly-core: Missing Release of Memory after Effective Lifetime also in 10 other products	5.3	30.10.2020
Medium	CVE-2020-1710	JBoss Enterprise Application Platform: security vulnerability also in 3 other products	5.3	16.09.2020
Medium	CVE-2023-3628	Infispan: rest bulk ops don't check permissions also in 5 other products	6.5	18.12.2023
Medium	CVE-2023-5236	Infinispan: circular reference on marshalling leads to dos also in 14 other products	4.4	18.12.2023
High	CVE-2023-5384	Infinispan: credentials returned from configuration as clear text also in 3 other products	7.2	18.12.2023
Medium	CVE-2023-3629	Infinispan: non-admins should not be able to get cache config via rest api also in 5 other products	4.3	18.12.2023

All products by Red Hat

Key figures

Vulnerabilities