Search for packages
| purl | pkg:maven/org.infinispan/infinispan-core@5.1.6.FINAL |
| Next non-vulnerable version | 14.0.25.Final |
| Latest non-vulnerable version | 15.0.0.Dev07 |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8674-26jc-wh98
Aliases: CVE-2020-25711 |
Improper Access Control in infinispan-server-runtime A flaw was found in infinispan 10 REST API, where authorization permissions are not checked … |
Vulnerable |
|
GHSA-gg57-587f-h5v6
Aliases: CVE-2023-5384 |
Infinispan caches credentials in clear text A flaw was found in Infinispan. When serializing the configuration for a cache to … |
Not vulnerable |
|
GHSA-6x3v-rw2q-9gx7
Aliases: CVE-2019-10158 |
Improper implementation of the session fixation protection in Infinispan A flaw was found in Infinispan through version 9.4.14.Final. An improper … |
Vulnerable |
|
GHSA-46r5-59fg-2fjc
Aliases: CVE-2017-15089 |
Deserialization of Untrusted Data in Infinispan It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read … |
Vulnerable Vulnerable |
|
GHSA-4hhg-8ghq-vwq6
Aliases: CVE-2016-0750 |
Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization The hotrod java client in … |
Vulnerable |
|
CVE-2019-10158
Aliases: GHSA-6x3v-rw2q-9gx7 |
Session Fixation A flaw was found in Infinispan through version 9.4.14.Final. An improper implementation of the session fixation protection in … | There are no reported fixed by versions. |
|
CVE-2016-0750
Aliases: GHSA-4hhg-8ghq-vwq6 |
Infinispan: Deserialization of untrusted data in the Hot Rod Java client via automatic byte-array deserialization The hotrod java client in … | There are no reported fixed by versions. |
|
GHSA-h47x-2j37-fw5m
Aliases: CVE-2019-10174 |
Use of Externally-Controlled Input to Select Classes or Code in Infinispan A vulnerability was found in Infinispan such that the … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |