Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.infinispan/infinispan-commons@9.4.6.Final
purl pkg:maven/org.infinispan/infinispan-commons@9.4.6.Final
Next non-vulnerable version 14.0.25.Final
Latest non-vulnerable version 15.0.0.Dev07
Risk score 2.3
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2019-10174

A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class …
9.4.17.Final
Vulnerable
9.4.18.Final
Vulnerable
9.4.19.Final
Vulnerable
10.1.8.Final
Vulnerable
GHSA-gg57-587f-h5v6
Aliases:
CVE-2023-5384
Infinispan caches credentials in clear text A flaw was found in Infinispan. When serializing the configuration for a cache to …
14.0.25.Final
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2018-1131
Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated …