Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.infinispan/infinispan-embedded@9.1.7.Final
purl pkg:maven/org.infinispan/infinispan-embedded@9.1.7.Final
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2019-10174

A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class … There are no reported fixed by versions.
CVE-2018-1131

Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurations. A user with authenticated … There are no reported fixed by versions.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2017-15089
It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the …
CVE-2016-2141
JGroups before 4.0 does not require the proper headers for the ENCRYPT and AUTH protocols from nodes joining the cluster, …