RedHat Jboss Data Grid vulnerabilities

25 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Exploited RedHat Jboss Data Grid vulnerabilities

CVE-2023-5384 — Infinispan: credentials returned from configuration as clear text (CVSS 2.7)
CVE-2023-5236 — Infinispan: circular reference on marshalling leads to dos (CVSS 6.5)
CVE-2023-3629 — Infinispan: non-admins should not be able to get cache config via rest api (CVSS 6.5)
CVE-2023-3628 — Infispan: rest bulk ops don't check permissions (CVSS 6.5)
CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
CVE-2022-1271 — (CVSS 8.8)
CVE-2021-4104 — Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 (CVSS 7.5)
CVE-2020-14340 — (CVSS 5.9)
CVE-2020-25689 — (CVSS 6.5)
CVE-2020-25644 — (CVSS 7.5)
CVE-2020-1710 — (CVSS 5.3)
CVE-2019-14900 — (CVSS 6.5)
CVE-2020-1757 — (CVSS 8.1)
CVE-2019-14887 — (CVSS 9.1)
CVE-2019-14892 — Polymorphic deserialization of malicious object in jackson-databind (CVSS 9.8)
CVE-2019-14888 — (CVSS 7.5)
CVE-2019-10158 — (CVSS 9.8)
CVE-2019-10174 — (CVSS 8.8)
CVE-2019-10219 — (CVSS 6.1)
CVE-2019-10212 — (CVSS 9.8)
CVE-2019-10184 — (CVSS 7.5)
CVE-2019-3888 — (CVSS 9.8)
CVE-2017-2638 — (CVSS 6.5)
CVE-2018-1131 — (CVSS 8.8)
CVE-2016-4970 — (CVSS 7.5)