← Back

Data Grid

data_grid

Vendor: Redhat • 26 CVEs

CVEs (26)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-10771
3Infinispan
NetappRedhat
3Data Grid
Infinispan Server RestOncommand Insight
Jun 17, 2026
Jun 2, 2021
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) atta...Show more
A flaw was found in Infinispan version 10, where it is possible to perform various actions that could have side effects using GET requests. This flaw allows an attacker to perform a cross-site request forgery (CSRF) attack.Show less
CVE-2021-3536
1Redhat
9Build Of Quarkus
Data GridDescision Manager+6 more
Jun 17, 2026
May 20, 2021
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality...Show more
A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.Show less
CVE-2020-25711
3Infinispan
NetappRedhat
3Active Iq Unified Manager
Data GridInfinispan
Jun 17, 2026
Dec 3, 2020
N/A· v4
6.5 MEDIUM· v3
4.9 MEDIUM· v2
A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations l...Show more
A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can perform operations like shutting down the server without the ADMIN role.Show less
CVE-2020-25644
2Netapp
Redhat
10Data Grid
Jboss Data GridJboss Enterprise Application Platform+7 more
Jun 17, 2026
Oct 6, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vuln...Show more
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.Show less
CVE-2019-14838
1Redhat
4Data Grid
Jboss Enterprise Application PlatformSingle Sign On+1 more
Jun 17, 2026
Oct 14, 2019
N/A· v4
4.9 MEDIUM· v3
4.0 MEDIUM· v2
A flaw was found in wildfly-core before 7.2.5.GA. The Management users with Monitor, Auditor and Deployer Roles should not be allowed to modify the runtime state of the server
CVE-2015-7501
1Redhat
15Data Grid
Jboss A MqJboss Bpm Suite+12 more
May 13, 2026
Nov 9, 2017
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Ope...Show more
Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.Show less